Top Cybersecurity Jobs in London

Respond to complex enterprise cyberattacks through Cloudflare Managed Defense, including Layer 3, 4, and 7 DDoS and application security incidents. Investigate telemetry, analyze packets and traffic, create mitigation rules, monitor alerts, communicate with customers during active incidents, maintain runbooks, lead onboarding and security reviews, and collaborate with engineering and threat intelligence teams. The role requires rotating 24x7 shifts and expertise in network and application security.

Design, develop, review, deploy, and maintain security-focused distributed systems operating at internet scale. Participate in on-call rotations, monitor emerging web application security risks, contribute to product roadmaps, collaborate cross-functionally, and mentor other engineers through technical guidance and knowledge sharing.

Leads multiple engineering teams delivering customer-facing cybersecurity products. Sets technical direction and strategy, partners with Product Management, mentors engineering managers and engineers, establishes performance metrics, manages cross-organizational projects, hires engineering talent, and drives continuous improvement while fostering an empathetic, results-oriented engineering culture.

Design, build, and operate Cloudflare application security systems, including rate limiting and web application firewall services. Lead complex technical projects, define scalable architectures, improve reliability, review code and designs, collaborate across engineering teams, and mentor other engineers. The role involves distributed systems, production monitoring, debugging, operational improvements, and occasional on-call support.

Design, implement, and maintain distributed software systems supporting Cloudflare’s application security products, including Rate Limiting and Web Application Firewall. Participate across the software development lifecycle, write automated tests, monitor production deployments, debug complex systems, review code, collaborate with security and infrastructure teams, and mentor colleagues. The role involves Rust and Go development, databases, Docker, Kubernetes, and maintaining reliable, fault-tolerant systems at scale, with possible on-call responsibilities.

Build automated GRC solutions and maintain the GRC platform; architect AI governance for autonomous agents; support audit readiness (SOC 2, ISO 27001, PCI, FedRAMP) via automated drift detection and self-healing; and integrate security across Legal, People, Engineering, and Finance to enable developer-friendly compliance.

Conduct vulnerability scanning and in-depth analysis, triage and prioritize findings, produce remediation guidance, track remediation progress, and ensure processes and evidence meet DoD IL4 and FedRAMP compliance requirements while collaborating with engineering and compliance teams.

Lead product security assessments, threat model features, triage and own vulnerability lifecycle from bug bounty, SAST, fuzzing, and pentests. Build AI/LLM-driven automation and tooling to scale triage and enrichment, mentor engineers, and influence security across distributed cloud products.

Conduct threat models and security reviews for Cloudflare products, triage and manage vulnerability lifecycle (bug bounties, SAST, fuzzing, pentests), build AI/LLM-driven automation tooling for triage and enrichment, coordinate pentests and remediation with engineering, and act as the product security point of contact.

Lead architecture and technical strategy for threat detection and response across Cloudflare's network. Design and build large-scale data pipelines and edge/Cloud systems, develop AI-assisted workflows for threat hunting, mentor engineers, operate production services (Kubernetes, Workers), and participate in on-call incident response while collaborating with Threat Intelligence, Product, Legal, and Trust & Safety teams.