Description
We are seeking a highly skilled AI Security Research & Red team engineer to join our Red Team within the Security Threat Detection, Response and Emulation organization.
This is a critical role that will be at the forefront of protecting our company and customers from malicious threats.
Key Responsibilities:
- Perform deep-dive research to identify AI-specific vulnerabilities and risks across Cloudflare's products and services.
- Conduct rigorous testing of agentic implementations and LLM usage to define requirements and implementation guidance.
- Execute full-chain red team operations targeting Cloudflare's global infrastructure, corporate networks, and product ecosystems.
- Establish a framework for testing Security Efficacy, measuring detections against known TTPs.
- Foster a collaborative relationship with the Blue Team to ensure findings are translated into defensive improvements.
- Provide technical leadership, fostering a culture of curiosity and ethical hacking.
- Translate complex technical exploits into risk-based narratives for leadership.
Partnerships:
- Act as a sparring partner for the Security Incident Response Team (SIRT).
- Partner with Threat Detection & Threat Engineering to bridge the gap between adversary simulation and defensive coverage.
- Collaborate with Product Engineering/SRE to drive resilience in processes and implementations.
- Bridge the gap between paper security and technical reality with Governance, Risk, and Compliance (GRC).
Required Qualifications:
- 4+ years in offensive security, application security, or a relevant field.
- Deep knowledge of AI, coding agents, LLMs, prompt engineering, and AI-related attack vectors.
- Strong background in manual penetration testing, exploit development, or cloud security.
- Experience using the MITRE ATT&CK framework.
- Excellent communication skills.
- Familiarity with automated breach and attack simulation tools and custom-built frameworks.