Security Engineer, Applied Research & Labs

Cloudflare is seeking a Security Engineer to design and build agentic security tooling for Cloudflare Security, and to release that work as open-source reference implementations, interactive labs, and technical workshops for customers and partners.

Responsibilities

Security Tooling & Reference Implementations

• Design and build agentic security workflows and tooling for Cloudflare Security, including multi-agent orchestration, tool integration, and evaluation harnesses
• Release internal harnesses, skill definitions, and orchestration workflows as documented open-source reference implementations
• Implement on Cloudflare Workers, Durable Objects, Workflows, Workers AI, AI Gateway, and the Agents SDK

Labs & Workshops

• Define the technical scope and sequencing of each lab, including the failure modes participants will hit and the scaffolding they need
• Build and operate the lab infrastructure: per-participant isolation, automated provisioning, state reset, and teardown
• Run hands-on workshops where customers and partners build and deploy the tooling themselves
• Document and package workshop formats so other Cloudflare engineers can deliver them

External Engagement

• Present Cloudflare's agentic security architecture through customer briefings and conference talks
• Author technical deep dives and architecture write-ups that establish Cloudflare Security as a recognized voice in the security community
• Partner with Product and Engineering to align external technical content with the roadmap

Requirements

• 4+ years in software engineering, shipping and operating production systems
• Demonstrated experience building interactive labs, hands-on learning platforms, or developer training environments, including the infrastructure behind them
• Strong design judgment for technical learning experiences, including scope, sequencing, and knowing what to leave out
• Proficiency in TypeScript, Python, or a comparable language, with production experience in distributed or event-driven systems
• Hands-on experience building LLM-based systems, including agent orchestration, tool use, context engineering, and evaluation
• Experience with Cloudflare Workers, Durable Objects, Workflows, Workers AI, AI Gateway, and Vectorize, or an equivalent serverless stack
• Working knowledge of application and infrastructure security, including common vulnerability classes and secure development practices
• Published technical writing, conference talks, or open-source contributions