
Remote opportunity at
CloudflareSecurity Engineer, Applied Research & Labs
Cloudflare runs one of the largest networks in the world, serving millions of websites and applications for customers from individual bloggers to Fortune 500 companies. This…
Career Tools
About This Role
Cloudflare runs one of the largest networks in the world, serving millions of websites and applications for customers from individual bloggers to Fortune 500 companies. This Security Engineer role in the Applied Research and Labs function sits within the Office of the CSO and is based in Austin, Texas. The job centers on designing agentic security tooling for Cloudflare Security, such as multi-agent orchestration, tool integration and evaluation harnesses. The…
Job Description
Cloudflare runs one of the largest networks in the world, serving millions of websites and applications for customers from individual bloggers to Fortune 500 companies. This Security Engineer role in the Applied Research and Labs function sits within the Office of the CSO and is based in Austin, Texas.
The job centers on designing agentic security tooling for Cloudflare Security, such as multi-agent orchestration, tool integration and evaluation harnesses. The engineer also releases that work as open-source reference implementations and builds interactive labs and hands-on workshops that customers and partners complete themselves. The position is embedded with Cloudflare security teams and built on the Cloudflare Developer Platform.
The role combines engineering with teaching and external communication. The engineer defines the scope and sequence of each lab, runs the lab infrastructure (per-participant isolation, provisioning, state reset and teardown), presents architecture in customer briefings and conference talks, and writes technical deep dives. Travel of 15 to 25 percent is expected for workshops, conferences and other offices, and occasional work outside standard hours supports EMEA and APAC sessions.
Candidates should have four or more years in software engineering, including production experience with distributed or event-driven systems, along with experience building LLM-based systems and interactive learning environments. The posting says the role may involve information covered by US export control laws, and that an offer may depend on authorization to receive controlled technology without sponsorship. No salary is stated in the listing.
Responsibilities
- Design and build agentic security workflows for Cloudflare Security, covering multi-agent orchestration, tool integration and evaluation
- Release internal harnesses, skill definitions and orchestration workflows as documented open-source reference code
- Build the tooling on the Cloudflare platform, including the Agents SDK, Workers AI and AI Gateway
- Set the technical scope and order of each lab, including the failure points participants will hit and the scaffolding they need
- Build and run lab infrastructure with isolated environments per participant, automated provisioning, state reset and teardown
- Lead hands-on workshops where customers and partners build and deploy the tooling themselves
- Document and package workshop formats so other Cloudflare engineers can deliver them
- Present the agentic security architecture in customer briefings and at conferences
- Write technical deep dives and architecture articles for the security community
- Work with Product and Engineering to align external technical content with the roadmap
Requirements
- Four or more years of software engineering, including shipping and operating production systems
- Demonstrated experience building interactive labs, hands-on learning platforms or developer training environments, including the infrastructure behind them
- Solid judgment on how to design learning experiences: scope, sequence, and what to leave out
- Proficiency in TypeScript, Python or a comparable language, with production experience in distributed or event-driven systems
- Hands-on experience building LLM-based systems, including agent orchestration, tool use, context engineering and evaluation
- Familiarity with Cloudflare Workers, Durable Objects, Workflows, Workers AI, AI Gateway and Vectorize, or a similar serverless stack
- Working knowledge of application and infrastructure security, including common vulnerability classes and secure development practices
- A record of published writing, conference presentations or open-source work
- Work may involve information controlled under US export laws, and an offer may depend on authorization to receive controlled technology without sponsorship
Qualifications
- Practical security experience across any domain
- Familiarity with Cloudflare's Agents SDK
- Background in developer education, certification programs or developer relations
- Major contributions to, or maintenance of, an open-source project focused on security or developer tools
- Prior talks given at security or developer events
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the job based?
The posting specifies Austin, TX as the base location, with 15 to 25 percent travel for customer workshops, conferences and other Cloudflare offices.
Is a salary listed?
No salary is stated in the posting text.
What experience is required?
Four or more years in software engineering, production experience with distributed or event-driven systems, and published writing, talks or open-source work are required.
Is occasional work outside normal hours expected?
Yes, the posting says occasional work outside standard hours may be needed to support sessions across EMEA and APAC time zones.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.