Cloudflare
Insider Threat Engineer
- Confirmed live in the last 24 hours
- No salary listed
- Mid level
- Hybrid · Austin, TX, United States
- 5+ yrs exp
- Added 2 months ago
About this role
Cloudflare is seeking an experienced Insider Threat Engineer to lead their program focused on detecting and responding to malicious and unintentional internal risks. This role blends technical investigation, threat hunting, and collaboration with Legal, HR, and Privacy teams to safeguard company assets while ensuring legal and ethical compliance. You'll be instrumental in enhancing detection capabilities and developing robust response strategies.
What you'll do
- Lead technical investigations into insider threat incidents like data exfiltration and unauthorized access.
- Proactively hunt for insider threats using security tools and data sources.
- Collaborate with teams to improve insider threat detection and response playbooks.
- Serve as a technical liaison with Legal, HR, and Privacy.
- Develop and implement new security rules and alerts.
- Document investigative findings and present them to leadership.
What they're looking for
- Digital Forensics
- Incident Response
- SIEM (Splunk, Elastic)
- EDR (CrowdStrike, SentinelOne)
- UEBA
- Python
- PowerShell
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Cloudflare
- Industry
- Technology & Software
- Website
- cloudflare.com
Likely interview questions
- Describe your experience conducting digital investigations, including the tools you've used and the methodologies you employed.
- How would you approach threat hunting for insider threats within a large-scale cloud environment?