Top Cybersecurity Jobs in New York City, NY

Leads an engineering team developing bot management, fraud detection, and abuse mitigation products. Responsibilities include hiring and mentoring engineers, shaping the technical roadmap, guiding scalable distributed systems and APIs, integrating detection and machine learning signals, improving customer outcomes, maintaining operational health, and coordinating cross-functional execution. The role oversees real-time services, analytics pipelines, observability, releases, incident response, and customer-focused security capabilities.

Research web application vulnerabilities and exploitation techniques, develop and maintain Cloudflare WAF managed rules, investigate false positives and missed attacks, test defenses against bypasses, automate exploit reproduction and validation, and use SQL and production telemetry to measure detection quality. The role collaborates with engineering, product, and customer-facing teams while documenting security research and mitigation decisions.

Own customer security questionnaires, RFPs, technical assessments, and audit facilitation. Advise enterprise customers, Sales, and Legal on security architecture and compliance terms. Build AI-powered workflows for questionnaire triage and evidence retrieval, maintain authoritative compliance knowledge repositories, and support Trust Portal development. Write public security content covering frameworks, controls, products, and regulations while partnering cross-functionally with Marketing, Engineering, Product, Legal, and AI teams.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Build and operate production UEBA services that ingest Cloudflare One signals, create behavioral detections, maintain user-risk scores, and support customer investigations. Design scalable distributed infrastructure, collaborate across product and engineering teams, and ensure reliability through monitoring, capacity planning, testing, and operational follow-through. The role requires backend or distributed-systems experience, systems programming, database expertise, event-driven architecture knowledge, and production observability skills.

Design, build, run, and scale distributed tools and data pipelines to support threat disruption and platform abuse efforts. Translate legal and security requirements into scalable services, improve system architecture, monitor production (on-call), collaborate with Threat Intelligence, Legal and Product teams, and mentor other developers to promote testing and best practices.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Conduct AI security research, agentic and LLM testing, vulnerability discovery, adversary simulations, and full-chain red team operations. Test WAF, EDR, and SIEM detection efficacy using MITRE ATT&CK, collaborate with blue teams and incident response, develop detection validation frameworks, report risks to executives, and mentor security professionals.