Cloudflare
Incident Response Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Incident Response Analyst
Incident Response Analyst - REACT
Available Location – Bengaluru
About Cloudflare
At Cloudflare, we are on a mission to help build a better Internet. We run the world’s largest network, empowering millions of websites and Internet properties—from individual bloggers to Fortune 500 companies—by protecting and accelerating them without requiring hardware, software modifications, or code changes. Our intelligent global network improves performance, reduces spam, and mitigates attacks while getting smarter with every request.
Named to Entrepreneur Magazine’s Tech Companies with the Best Cultures and Fast Company’s World’s Most Innovative Companies, Cloudflare fosters a culture of curiosity, iteration, and collaboration. We seek builders who challenge the status quo, leverage AI to solve complex problems, and embody a mindset of fast iteration with shared improvements.
If you thrive in an environment where agility trumps bureaucracy and AI is a tool to drive progress, you’ll fit in.
Project Galileo & Athenian Project
Looking beyond enterprise customers, Cloudflare plays pivotal roles in protecting the open Internet:
- Project Galileo: Since 2014, we’ve armed 2,400+ journalism and civil society organisations in 111 countries with free, enterprise-grade DDoS protection against censorship.
- Athenian Project: Since 2017, we’ve secured 425+ local government election websites across 33 U.S. states to ensure uninterrupted access to critical voting information.
1.1.1.1 DNS
We pioneered 1.1.1.1, a free, privacy-focused DNS resolver ensuring users are never tracked and their data is never sold. Privacy is non-negotiable.
About the Role: Incident Response Analyst
Join Cloudflare’s REACT organisation—dedicated to safeguarding Cloudflare and its customers from advanced, evolving threats. In this role, you will:
▶ Proactively fortify security postures through threat intelligence. ▶ Lead incident response during cyberattacks, ensuring mitigation, containment, and recovery. ▶ Collaborate with forensic analysts, researchers, and engineers to detect and disrupt malicious activity. ▶ Bridge customer stakeholders—from executives to engineers—providing clear, actionable insights.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
1. Incident Response & Active Edge Mitigation
- Active Defence at Scale:
- Deploy custom WAF rules, L3/L4 DDoS shunning, and real-time traffic filtering to neutralize attacks before they impact customers.
- Full IR Lifecycle Ownership:
- Execute end-to-end incident response (investigation → containment → remediation → recovery).
- Review deliverables and coordinate with customers, ensuring quality and resolution.
- Strategic Remediation:
- Develop tailored tactical and strategic plans to respond to targeted attacks and mitigate breaches.
2. Threat Hunting & Forensic Support
- Hunt for indicators of compromise (IOCs) to predict and prevent incidents.
- Work closely with cloud and OS forensic specialists to analyze malware and attacker tactics.
Desirable Skills, Knowledge & Experience
Core Requirements
- Education:
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent (practical experience matriculates).
- Experience:
- 5+ years in cybersecurity, including 2+ years in dedicated Incident Response.
- OS & Cloud IR Expertise:
- Hands-on experience across Windows, Unix, Linux, Mac OS.
- Deep familiarity with AWS, Azure, O365, Google Cloud, and Cloudflare environments; cloud-based incident response.
- Network & Web Attacks:
- Proven expertise in L3/L4/L7 attacks (e.g., SYN floods, DNS amplification, Botnet abuse, credential stuffing).
- Experience with JA3/JA4 fingerprinting, behavioral traffic analysis, and API attack investigations.
- Live Incident Support:
- Experience mitigating DDoS, bot, and application-layer attacks under pressure.
- Mitigations Frameworks:
- Solid understanding of MITRE ATT&CK and NIST Cybersecurity Framework.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Soft Skills:
- English fluency with technical communication prowess to translate complex findings to both executives and engineers.
- Ability to build relationships and establish trust quickly.
Bonus Experience (Not Mandatory)
- Networking & Routing Deep-Dive:
- Expertise in BGP, Anycast, DNS, TCP/IP, GRE/IPsec tunneling, RPKI, and ASN ownership.
- Scripting:
- Proficient in Python or Golang to write modular or commodity scripts.
- Malware Analysis:
- Yara rule writing, malware hunting (static/dynamic/automated techniques).
- Reverse engineering advanced persistent threats (APTs), infected infrastructure attribution, and evasion tactics.
- Forensics & Log Analysis:
- Experience with network flows, system logs, regex, binary analysis, and binary-level investigation.
Why Cloudflare?
Nowhere else can you: ☑ Work on global-scale projects with direct impact. ☑ Defend journalists, governments, and millions of users (e.g., Project Galileo, Athenian Project). ☑ Improve privacy with no client tracking (1.1.1.1). ☑ Explore cutting-edge security tools built to protect the entire Internet.
We’re more than aat tech company—we are a community shaping a safer digital future.
We Belong to You
Cloudflare values diversity and inclusion, and applauds candidates of all backgrounds.
Legal Requirements: This role requires U.S. export compliance under regulations such as the U.S. Export Administration Regulations (EAR). Employment offers may be contingent upon eligibility to access restricted software/technology.
Accommodations
Cloudflare is committed to equal opportunity employment. Reasonable accommodations are provided upon request—contact hr@cloudflare.com.
Ready to turn cybersecurity challenges into solutions? Apply today! (Accessibility disclaimer included if applicable)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills