SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 136,000 - 206,000 / annual
Cloudflare is seeking a Systems Engineer to join the UEBA (User and Entity Behavior Analytics) team within Cloudflare One. The role focuses on building and operating production services that ingest Cloudflare One signals, produce high-fidelity user-risk events, maintain risk scores, and deliver that information to customer-facing experiences and other Cloudflare services.
You will own well-defined projects through design, implementation, testing, rollout, and operational follow-through. Key responsibilities include:
• Build behavioral detections: Transform product requirements and available telemetry into production-ready detections across signals such as Access, Gateway, DNS, device posture, and data protection. Define data dependencies, evaluation approaches, and signal quality assessment before release.
• Make risk understandable: Connect detection output to event history, logs, and customer-facing investigations so security practitioners can see what triggered findings and how a user's risk changed.
• Design and scale infrastructure: Architect, deploy, and maintain robust distributed systems with focus on high availability, low latency, and horizontal scalability.
• Collaborate across teams: Work with Product and engineers in Access, Gateway, Analytics and Reporting, Logs, and other data-producing or data-consuming teams to agree on event contracts and deliver end-to-end functionality.
• Ensure reliability: Participate in architecture reviews, capacity planning, and proactive system health monitoring to guarantee maximum uptime and resilience.
Cloudflare's mission is to help build a better Internet. The company operates one of the world's largest networks powering millions of websites and Internet properties for customers ranging from individual bloggers to Fortune 500 companies. The culture emphasizes iteration, leveraging AI to ship faster, and values curiosity over bureaucracy.
REQUIREMENTS:
• 3+ years of professional experience building, testing, and operating backend or distributed systems in production
• Strong proficiency in at least one systems programming language (Go, Rust, C/C++) with a track record of writing clean, maintainable code
• 3+ years of practical experience with databases and data-intensive services (PostgreSQL, ClickHouse, or comparable relational or analytical stores)
• Experience reasoning about event-driven systems: message delivery, duplicate or late events, state, failure recovery, and safe changes to live consumers or APIs
• Clear written and verbal communication and ability to work through technical decisions with product and engineering partners
• Experience using metrics, logs, traces, profiling, and experiments to understand production behavior and validate improvements
• Strong opinions, clear judgment, and willingness to revise your view when data, users, or production reality prove otherwise
BONUS EXPERIENCE:
• Security analytics, fraud or abuse detection, identity, Zero Trust, SASE, or network telemetry
• Kafka or other streaming systems; Kubernetes; high-volume event processing
• Statistical baselines, anomaly detection, time-windowed aggregation, or evaluating false positives and detection coverage
• DNS, HTTP, authentication events, data-loss-prevention signals, or endpoint-security integrations
• Distributed state, caches, object storage, or safe migration of legacy production services
