Network Security Engineer

About the role

Cloudflare is hiring an experienced Network Security Engineer to support its largest and most technically sophisticated customers in resolving technical problems, threats or attacks on their infrastructure at OSI Layers 3, 4 and 7. The role covers Cloudflare products such as Magic Transit, Argo Smart Routing, DDoS mitigation, Network Firewall, WAF, Spectrum and Rate Limiting. It is open to experienced candidates and to fresh graduates graduating in December 2026 or January 2027, based in Singapore or Tokyo.

Key responsibilities

• Serve as a trusted technical advisor for enterprise customers, resolving inquiries and incidents on network security and performance
• Diagnose and troubleshoot issues involving DDoS mitigation, firewall rules, SSL/TLS, network confirmation and other security configurations
• Create and maintain knowledge base articles, technical guides and troubleshooting documentation
• Analyse traffic signatures (IP addresses, cookies, HTTP headers, JavaScript footprints) to distinguish good from malicious traffic
• Advise customers on filtering malicious traffic using Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting and rate limiting
• Work with Engineering and Product teams to improve products and tools
• Use generative AI and automation to streamline log analysis and root-cause analysis during security incidents

Required profile

• Minimum 4 years of experience as a Network Security Engineer, Technical Support Engineer or Sr. Support Engineer for networking or web security products
• Bachelor's degree in Computer Science, Cybersecurity or a related field (or equivalent experience)
• Proven experience troubleshooting network connectivity, BGP routing and GRE tunnels, and packet capture analysis
• Relevant certifications such as CISSP, GCIA, GCIH, GCFA or GCFE (or equivalent)

Required skills

• Strong understanding of TCP/IP, DNS, HTTP/S and BGP, including anycast routing, iptables and looking glass
• Command-line tools: curl, dig, traceroute, openssl, git
• Web server configuration (Apache, Nginx, Caddy, IIS) and scripting in Bash, Python, JavaScript or similar
• Databases: PostgreSQL, MySQL, MS SQL