Skip to content
Updated How AI-exposed are the skills employers are hiring for? See the data →

From the employer's careers site First seen 5 Nov 2026

Senior Product Manager - Zero-Day Protection

Cloudflare Hybrid senior full-time

Salary

$156,000 - $216,000 per year

Apply on Cloudflare

Description

Job Description

As Senior Product Manager for Zero-Day Protection, your goal is to help protect more than 25% of the Internet from HTTP-exploitable vulnerabilities and attacks.

Responsibilities

Product strategy and roadmap

  • Own the strategy and roadmap for WAF Managed Rules and Cloudflare's broader zero-day protection experience.
  • Partner with other product and engineering teams to help customers identify exposure, deploy mitigations, investigate attacks, and remediate vulnerable software.
  • Define how Managed Rules integrates with code scanning and exposure discovery to help customers identify applications affected by newly disclosed vulnerabilities.
  • Prioritize shared security primitives, telemetry, and APIs that make emergency protections easier to automate across Cloudflare's security products.
  • Define workflows for creating, testing, deploying, and auditing ad-hoc emergency policies when a managed detection is not sufficient for a customer's environment.
  • Partner with the Cloudflare Security Analyst team to turn threat intelligence, vulnerability research, and detection opportunities into product priorities.
  • Partner with Security, Legal, and external researchers during coordinated disclosure processes to prepare customer protections and communications.
  • Discover and prioritize Enterprise operational needs with customers, Solutions Engineering, Support, and Engineering.

Customer experience

  • Own the end-to-end customer journey: identifying affected applications, discovering protections, deploying them safely, testing before enforcement, reviewing security events, investigating incidents, configuring exceptions and confirming remediation.
  • Ensure customers can understand what protections they have, what events mean, and what action to take.
  • Establish feedback loops with Support, Customer Success, Solutions Engineering, and customers.

Operations and communications

  • Support the Security Analyst team's vulnerability-response work by providing product context and customer perspective.
  • Coordinate responsible disclosure and external vulnerability communications with Security, Legal, and Communications.
  • Write technical posts, customer guidance, and product communications for security researchers, customers, press, and non-technical audiences.
  • Represent Cloudflare in the broader security community, at conferences, and online as a product and technical spokesperson for Managed Rules and HTTP application vulnerabilities.

Skills Required

  • Strong product-management experience, including strategy, roadmap ownership, discovery, prioritization, and cross-functional delivery.
  • Technical fluency to understand HTTP applications, vulnerabilities, exploits, and detection systems.
  • Ability to synthesize input from security analysts, engineers, customers, and commercial teams into clear product decisions.
  • Customer empathy and strong product judgment, especially for complex technical workflows.
  • Excellent written and verbal communication for technical and non-technical audiences.
  • Comfort operating in a fast-moving, ambiguous security environment.
  • Strong cross-functional leadership across Security Analysts, Engineering, Support, Customer Success, Solutions Engineering, Legal, Communications, and other product teams.

Nice to have

  • Security research, exploit-development, or detection-engineering experience.
  • Experience with WAFs, managed rules, security-rule rollout, false-positive management, application security, threat intelligence, security operations or vulnerability management.
  • Experience with Enterprise security operations, including APIs, automation, auditability, policy controls, logs, and SIEM integrations.
  • Experience with code scanning, software supply-chain security, or exposure discovery.
  • An established presence in the security research community, conference speaking, technical writing, or press engagement.

Compensation

  • For Lisbon based hires: Estimated annual salary of 65,000 - 80,000 EURO
  • For New York City based hires: Estimated annual salary of $156,000 - $216,000

Equity

This role is eligible to participate in Cloudflare's equity plan.

Benefits

Cloudflare offers a complete package of benefits and programs to support you and your family.

What Makes Cloudflare Special?

We're not just a highly ambitious, large-scale technology company. We're a highly ambitious, large-scale technology company with a soul.

Skills

Required

  • product management
  • HTTP applications
  • vulnerabilities
  • exploits
  • detection systems
  • cross-functional leadership

Nice to have

Ready to apply?

You apply with the employer directly. Their original posting is here: https://job-boards.greenhouse.io/cloudflare/jobs/8346327

Apply on Cloudflare