SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Cloudflare is seeking a Senior Response Engineer for its Network Security team, based in London. This role sits at the intersection of deep routing protocol investigation, edge-network defense, and strategic technical partnership within Cloudflare's Managed Defense Center (CMDC).
You will serve as a core technical specialist and subject matter expert for sophisticated infrastructure threats across OSI Layers 3 and 4. Your responsibilities include architecting responses to large-scale volumetric DDoS attacks and complex network-layer anomalies affecting Cloudflare's global customer base.
Key responsibilities:
- Act as a primary technical anchor for network defense, providing advanced assistance across Cloudflare's most sophisticated customer environments
- Demonstrate deep mastery of infrastructure protection components including Magic Transit, Advanced TCP/DNS Protection, DDoS detection rulesets, Cloudflare Firewall, Spectrum, and DNS Firewall
- Serve as a "player-coach," providing hands-on technical mentorship and guidance during live incidents while reviewing complex mitigation strategies
- Conduct deep-dive investigations using advanced internal telemetry to engineer informed mitigation strategies, focusing on DDoS vectors, BGP routing anomalies, and GRE encapsulation issues
- Design and refine detection mechanisms, security controls, and alerting thresholds to ensure rapid identification of sophisticated network attacks with minimal false positives
- Partner with Product, Engineering, and AI teams to transform real-world DDoS attack data into AI-powered automated network defenses and enhanced platform capabilities
- Serve as an authoritative technical voice during active volumetric attacks, providing clarity and architectural routing guidance to internal stakeholders and customer engineering teams
- Lead technical response to sophisticated infrastructure threats, validating mitigation rule efficacy and ensuring stable traffic delivery via BGP and GRE mechanisms
The ideal candidate moves beyond static runbooks to engineer AI-assisted response workflows, transforming raw network flow telemetry into actionable mitigation strategies and intelligent, automated edge defenses.
