Remote Threat Advisory Engineer

Summary

Join Cloudflare's Solutions Engineering organization as a Threat Advisory Engineer (TAE) to lead technology discussions with customers under attack and confidently handle attack mitigation using Cloudflare technology and tools.

Requirements

• Experience performing technical analysis involving threat event data and evaluating malicious activity
• Deep knowledge of TCP/IP and related network protocols: knowledge of standard network protocols like TCP, ARP, ICMP, DHCP, DNS, HTTP, SNMP etc., and accompanying protocol/packet analysis/manipulation tools
• Working/in-depth knowledge of information security protection/detection and authentication systems (firewalls, IDS, IPS, anti-virus, etc.)
• Knowledge of commonly-accepted information security principles and practices, as well as techniques attackers would use to identify vulnerabilities, gain unauthorized access, escalate privileges and access restricted information
• In-depth knowledge of current operating environments (Microsoft, Linux, & Other operating systems, and cloud providers)
• Understanding and use of scripting and third party security tools
• Working understanding of database systems, application system development and installation/implementation processes
• Exceptional analytical and critical thinking, willingness to challenge status quo. Excellent interpersonal skills
• Advanced written and oral communications, self-motivator. Team player and independent worker, highly adaptive

Responsibilities

• Lead the technology discussion with customers reaching out to Cloudflare while they are Under Attack
• Confidently and calmly handle the efforts of attack mitigation using Cloudflare technology and tools
• Work closely with Cloudflare Product and Engineering teams to analyze threat data and provide insights to Sales and Solutions Engineering teams to support the sales process
• Create threat intelligence reports and collateral for internal and external consumption

Preferred Qualifications

• Previous experience in a SOC or NOC, or PEN testing
• Knowledge of specific security products such as Bot Management, DDoS mitigation and Web Application Firewalls (WAF)
• Awareness of the Zero Trust security model architecture
• Worked with JIRA or other support desk tools in the past