# Senior Product Manager - Zero-Day Protection **Company**: Cloudflare **Location**: Hybrid **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Salary**: $156,000 - $216,000 **Category**: Product Management **Industry**: Technology **Apply**: https://job-boards.greenhouse.io/cloudflare/jobs/8346327?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_f2e05dfa-184 ## Description ## Job Description As Senior Product Manager for Zero-Day Protection, your goal is to help protect more than 25% of the Internet from HTTP-exploitable vulnerabilities and attacks. ## Responsibilities ### Product strategy and roadmap - Own the strategy and roadmap for WAF Managed Rules and Cloudflare's broader zero-day protection experience. - Partner with other product and engineering teams to help customers identify exposure, deploy mitigations, investigate attacks, and remediate vulnerable software. - Define how Managed Rules integrates with code scanning and exposure discovery to help customers identify applications affected by newly disclosed vulnerabilities. - Prioritize shared security primitives, telemetry, and APIs that make emergency protections easier to automate across Cloudflare's security products. - Define workflows for creating, testing, deploying, and auditing ad-hoc emergency policies when a managed detection is not sufficient for a customer's environment. - Partner with the Cloudflare Security Analyst team to turn threat intelligence, vulnerability research, and detection opportunities into product priorities. - Partner with Security, Legal, and external researchers during coordinated disclosure processes to prepare customer protections and communications. - Discover and prioritize Enterprise operational needs with customers, Solutions Engineering, Support, and Engineering. ### Customer experience - Own the end-to-end customer journey: identifying affected applications, discovering protections, deploying them safely, testing before enforcement, reviewing security events, investigating incidents, configuring exceptions and confirming remediation. - Ensure customers can understand what protections they have, what events mean, and what action to take. - Establish feedback loops with Support, Customer Success, Solutions Engineering, and customers. ### Operations and communications - Support the Security Analyst team's vulnerability-response work by providing product context and customer perspective. - Coordinate responsible disclosure and external vulnerability communications with Security, Legal, and Communications. - Write technical posts, customer guidance, and product communications for security researchers, customers, press, and non-technical audiences. - Represent Cloudflare in the broader security community, at conferences, and online as a product and technical spokesperson for Managed Rules and HTTP application vulnerabilities. ## Skills Required - Strong product-management experience, including strategy, roadmap ownership, discovery, prioritization, and cross-functional delivery. - Technical fluency to understand HTTP applications, vulnerabilities, exploits, and detection systems. - Ability to synthesize input from security analysts, engineers, customers, and commercial teams into clear product decisions. - Customer empathy and strong product judgment, especially for complex technical workflows. - Excellent written and verbal communication for technical and non-technical audiences. - Comfort operating in a fast-moving, ambiguous security environment. - Strong cross-functional leadership across Security Analysts, Engineering, Support, Customer Success, Solutions Engineering, Legal, Communications, and other product teams. ## Nice to have - Security research, exploit-development, or detection-engineering experience. - Experience with WAFs, managed rules, security-rule rollout, false-positive management, application security, threat intelligence, security operations or vulnerability management. - Experience with Enterprise security operations, including APIs, automation, auditability, policy controls, logs, and SIEM integrations. - Experience with code scanning, software supply-chain security, or exposure discovery. - An established presence in the security research community, conference speaking, technical writing, or press engagement. ## Compensation - For Lisbon based hires: Estimated annual salary of 65,000 - 80,000 EURO - For New York City based hires: Estimated annual salary of $156,000 - $216,000 ## Equity This role is eligible to participate in Cloudflare's equity plan. ## Benefits Cloudflare offers a complete package of benefits and programs to support you and your family. ## What Makes Cloudflare Special? We're not just a highly ambitious, large-scale technology company. We're a highly ambitious, large-scale technology company with a soul. ## Skills ### Required - product management - HTTP applications - vulnerabilities - exploits - detection systems - cross-functional leadership ### Nice to have - security research - exploit-development - detection-engineering - WAFs - managed rules - security-rule rollout - false-positive management - application security - threat intelligence - security operations - vulnerability management --- Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/cloudflare/jobs/8346327?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)