Cloudflare
Response Engineer - CMDC
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Response Engineer - CMDC
Response Engineer – Cloudflare Managed Defense Center (CMDC) – Bengaluru
About Cloudflare
At Cloudflare, we’re building a better Internet. Our global network powers millions of websites and applications, protecting against cyberattacks and accelerating performance while ensuring reliability for customers—from individual bloggers to Fortune 500 enterprises. Named among the World’s Most Innovative Companies by Fast Company, we thrive on collaboration, AI-levelled problem-solving, and relentless iteration to counter internet challenges.
We welcome builders with a curiosity-driven mindset who challenge norms and leverage AI to innovate—but value teamwork, transparency, and scalable impact.
About the Department: Cloudforce One
Cloudforce One is Cloudflare’s threat operations and cybersecurity research team. It’s dedicated to identifying, neutralizing, and disrupting cyber threats, from cybercriminal activity to state-sponsored Advanced Persistent Threats (APTs). Operating close to key strategic partners (internal and external), they develop leading operational tradecraft and grow threat intelligence sources to drive expedited threat hunting and rapid malware remediation.
Leveraging Cloudflare’s unparalleled global network telemetry, Cloudforce One analyses vast, high-velocity datasets to extend actionable threat insights for customer protection.
About INTERDICT – Cloudforce One’s Core Functions
INTegate, ERase, DImension, Connect, Treat secures operations through I.N.T.E.R.D.I.C.T.: A unified operational security framework spanning 24/7/365 threat detection, response, and disruption across:
- PhishGuard: Managed email-based threat detection and automated response
- Cloudflare Managed Defense (CMD): 24×7 network & application security monitoring for proactive "Under Attack" mitigation
- Detection Engineering: ML-driven anomaly detection and advanced response optimization
Job Summary: Response Engineer - Cloudflare Managed Defense Center (CMDC)
You’ll act as a front-line technical monitor and incident responder for Cloudflare’s premium enterprise customers. Your work focuses on real-time detection, analysis, and mitigation of attacks at OSI Layers 3, 4, and 7.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Working alongside senior engineers, you’ll:
- Rapidly execute proven security incident runbooks to neutralise sophisticated DDoS attacks and application-layer threats
- Enable customers to defend complex architectures using Cloudflare’s core security tools:
- Magic Transit (global network DDoS mitigation)
- Web Application Firewall (WAF) (layer-7 attack blocking)
- Rate Limiting (bot protection)
A collaborative, detail-driven professional with a high-pressure resiliency and a hunger to spearhead security excellence in a rapidly evolving cybersecurity landscape would thrive here.
Core Responsibilities
-
Proactive Threat Monitoring:
- Analyze security alerts from internal telemetry to identify live infrastructure and application attacks
- Conduct rapid and rigorous root-cause investigations at high scale
-
Attack Mitigation & Traffic Filtering:
- Apply and optimize secure traffic rules using Magic Transit, WAF, and rate-limiting policies
-
Alert Coordination & Customer Response:
- Assess alert urgency, scope, and validity for met SLA response times
- Maintain thorough incident tracking records and escalation matrices
-
Professional Customer Communication:
- Clarify technical findings and mitigation steps during high-pressure incidents via phone, email, dashboards, and chat
-
Operational Documentation:
- Update customer-specific runbooks, incident response templates, and escalation protocols
-
Continuous Improvement:
- Provide regular technical feedback to Engineering and Product teams on tool optimisations
- Assist in refining alert rules, anomaly detection logic, or SIG detection patterns
Must-Have Qualifications
- 2–5 years of hands-on security operations or technical support in a SOC, MSSP, or SOC team (preferably with premier-managed services)
- Strong foundations in:
- Internetting protocols (TCP/IP, UDP, ICMP, BGP, DNS)
- Network security (Layer 3-7 attacks)
- Anomaly detection in network traffic
- Technical command-line fluency (Linux/Mac/native Windows) while scripting automation tasks
- Linux systems administration and Troubleshooting
- Customer-facing incident management experience: Rapid diagnostics + clear technical communication during crises
- Incident ticketing best-practice & escalation coordination skills
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice-to-Have Skills (Bonus Points)
- Hands-on experience with packet capture & forensic tools:
tcpdumpor Wireshark
- Proficiency in Python/Bash scripting for automation & CI workflows (e.g., Threat Hunting)
- Familiarity with:
- Prometheus/Grafana dashboards for traffic telemetry
- API/GraphQL datasets for threat intelligence
- Security certifications: CCNA, CompTIA Security+, or GIAC-credentialed roles (e.g., GCIA)
Why Cloudflare Stands Out
We merge ground-breaking technology with a soul that drives real-world impact. Our work protects key foundations of the modern Internet:
- Project Galileo: Turned Cloudflare’s defence revenue-neutral for 2,400+ journalists and 111 countries—their online tools are off-limits to hackers or authoritarian censorship.
- Athenian Project: Safeguarded >425 local election websites across 33 states with 100% integrity for public consensus.
- 1.1.1.1: Our public DNS resolver (launched globally) masters speed + privacy—no IP tracking or data sales. Strict no-network-spying guarantees.
At Cloudflare, you’ll enjoy an innovative culture of curation, where curiosity wins, efficiency is king, and every forward move strengthens the whole team.
Ready to tacke threats and build a better internet? Apply today—Bengaluru is hiring!
Important Note: Security Clearances
This role may require access to US export-controlled software/tech under the U.S. Export Administration Regulations. U.S. law mandates that applicants may be subject to subsequent export licensing authorisation for sensitive operations data.
Diversity & Citizenship Policy
Cloudflare is an Equal Opportunity Employer. We celebrate diversity—race, gender, disability, age, veteran status, or veteran support are not seen as barriers.
- Reasonable accommodations are provided for applicants with disabilities.
- Questions? Email hr@cloudflare.com for assistance.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills