Security Research Analyst, WAF Managed Rules
Core
Research web application threats and develop managed rules for Cloudflare's Web Application Firewall (WAF) to protect millions of Internet properties.
Role type
Security Research Analyst (WAF Managed Rules)
Builds
WAF managed rules, exploit signatures, and detection logic for web application security
Domain
Cybersecurity, Web Application Security, Threat Intelligence
Required skills
vulnerability research, WAF rule development, exploit signature creation, HTTP/HTTPS protocol analysis, SQL, Python/Go/Rust, adversarial testing, traffic analysis, false positive reduction
Preferred skills
WAF bypass research, large-scale security analytics, ClickHouse, Grafana, automated exploit-reproduction environments, Linux/UNIX systems, TCP/IP networking, published security research, CTF experience
Technologies
SQL, Python, Go, Rust, ClickHouse, Grafana, ModSecurity, OWASP Core Rule Set
Responsibilities
Research vulnerabilities and exploitation patterns from CVEs and threat intelligence; Design, test, and deploy WAF managed rules and exploit signatures; Investigate false positives and missed attacks using telemetry; Validate coverage and resistance to bypasses via penetration testing; Automate research and validation with custom tools; Measure detection quality using SQL and dashboards; Collaborate with engineering and product teams; Share actionable research through documentation and blogs
Seniority
Mid-level, hands-on IC
