Description
Job Description
As Senior Product Manager for Zero-Day Protection, your goal is to help protect more than 25% of the Internet from HTTP-exploitable vulnerabilities and attacks.
Responsibilities
Product strategy and roadmap
- Own the strategy and roadmap for WAF Managed Rules and Cloudflare's broader zero-day protection experience.
- Partner with other product and engineering teams to help customers identify exposure, deploy mitigations, investigate attacks, and remediate vulnerable software.
- Define how Managed Rules integrates with code scanning and exposure discovery to help customers identify applications affected by newly disclosed vulnerabilities.
- Prioritize shared security primitives, telemetry, and APIs that make emergency protections easier to automate across Cloudflare's security products.
- Define workflows for creating, testing, deploying, and auditing ad-hoc emergency policies when a managed detection is not sufficient for a customer's environment.
- Partner with the Cloudflare Security Analyst team to turn threat intelligence, vulnerability research, and detection opportunities into product priorities.
- Partner with Security, Legal, and external researchers during coordinated disclosure processes to prepare customer protections and communications.
- Discover and prioritize Enterprise operational needs with customers, Solutions Engineering, Support, and Engineering.
Customer experience
- Own the end-to-end customer journey: identifying affected applications, discovering protections, deploying them safely, testing before enforcement, reviewing security events, investigating incidents, configuring exceptions and confirming remediation.
- Ensure customers can understand what protections they have, what events mean, and what action to take.
- Establish feedback loops with Support, Customer Success, Solutions Engineering, and customers.
Operations and communications
- Support the Security Analyst team's vulnerability-response work by providing product context and customer perspective.
- Coordinate responsible disclosure and external vulnerability communications with Security, Legal, and Communications.
- Write technical posts, customer guidance, and product communications for security researchers, customers, press, and non-technical audiences.
- Represent Cloudflare in the broader security community, at conferences, and online as a product and technical spokesperson for Managed Rules and HTTP application vulnerabilities.
Skills Required
- Strong product-management experience, including strategy, roadmap ownership, discovery, prioritization, and cross-functional delivery.
- Technical fluency to understand HTTP applications, vulnerabilities, exploits, and detection systems.
- Ability to synthesize input from security analysts, engineers, customers, and commercial teams into clear product decisions.
- Customer empathy and strong product judgment, especially for complex technical workflows.
- Excellent written and verbal communication for technical and non-technical audiences.
- Comfort operating in a fast-moving, ambiguous security environment.
- Strong cross-functional leadership across Security Analysts, Engineering, Support, Customer Success, Solutions Engineering, Legal, Communications, and other product teams.
Nice to have
- Security research, exploit-development, or detection-engineering experience.
- Experience with WAFs, managed rules, security-rule rollout, false-positive management, application security, threat intelligence, security operations or vulnerability management.
- Experience with Enterprise security operations, including APIs, automation, auditability, policy controls, logs, and SIEM integrations.
- Experience with code scanning, software supply-chain security, or exposure discovery.
- An established presence in the security research community, conference speaking, technical writing, or press engagement.
Compensation
- For Lisbon based hires: Estimated annual salary of 65,000 - 80,000 EURO
- For New York City based hires: Estimated annual salary of $156,000 - $216,000
Equity
This role is eligible to participate in Cloudflare's equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family.
What Makes Cloudflare Special?
We're not just a highly ambitious, large-scale technology company. We're a highly ambitious, large-scale technology company with a soul.