Cloudflare Security Support Engineer (Level 3)

At Uni Systems, we are working towards turning digital visions into reality. We are continuously growing and we are looking for a Cloudflare Security Support Engineer (Level 3) to join our UniQue team.

• Configure and maintain Cloudflare WAF rules and policies to protect against OWASP Top 10 and emerging threats.
• Manage WAAP features to secure APIs and applications, including schema validation, threat intelligence, and behavioral analysis.
• Implement rate-limiting policies based on traffic patterns to prevent abuse, brute-force attacks, and scraping.
• Monitor and mitigate DDoS attacks using Cloudflare’s L3/L4/L7 protections.
• Optimize CDN configurations to ensure high availability, low latency, and efficient caching.
• Configure Bot Management to distinguish between legitimate bots and malicious traffic.
• Use Cloudflare Workers to deploy serverless functions for custom logic, header rewriting, and traffic inspection.
• Apply and maintain Page Rules for URL-specific behaviors (e.g. redirects, cache settings, security controls).
• Analyze traffic and logs to proactively identify and address vulnerabilities.
• Collaborate with DevOps, Application Security, and Network teams to enforce secure deployment practices.
• Respond to security incidents and troubleshoot Cloudflare service issues.
• Maintain and update the CMDB with configuration items and perform operational, support, and maintenance tasks on all relevant platforms.
• Log and track incidents, work orders, and change requests via ITSM tools; investigate and resolve issues related to WAF, WAAP, CDN performance, DDoS, and rate limiting, ensuring clear communication with end-users and accurate ticket updates or escalation as needed.
• Contribute to the creation and maintenance of documentation for recurring issues and share best practices within the team to enhance service quality.
• Leverage Infrastructure as Code tools (e.g., Terraform, SDKs, curl) to automate the deployment and management of Cloudflare configurations, and develop workflows to streamline tasks and improve service efficiency.

Requirements

• 3 years of higher education after secondary school with a minimum of 3 years of experience in a related field.
• At least three years of experience with:
• the Cloudflare Security Stack, covering Web Application Firewall (WAF) configuration, DDoS mitigation, rate limiting, and bot management to safeguard web applications and APIs.
• securing APIs through schema validation (e.g., Page Shield), along with managing SSL/TLS, DNS, and CDN optimization to ensure both security and performance.
• securing APIs through schema validation (e.g., Page Shield), along with managing SSL/TLS, DNS, and CDN optimization to ensure both security and performance.
• security analytics and log monitoring, secure coding, and vulnerability assessment and mitigation aligned with OWASP Top 10 best practices.
• incident response and troubleshooting, including swift identification and resolution of performance and security-related issues.
• DevOps and infrastructure automation, leveraging tools like Terraform or APIs to manage and streamline Cloudflare configurations.
• Expertise in:
• Deployment, configuration, and security operations of related technologies.
• Monitoring, version control, and upgrade management.
• Troubleshooting and debugging of performance, security rules, and system errors.
• Swift incident response and mitigation without disrupting legitimate traffic.
• Performance tuning to balance speed and security.
• Experience using IaC tools (e.g., Terraform) to automate routine support tasks.
• Proficient in designing workflows and automating repetitive processes.
• Ability to identify and implement automation opportunities to improve efficiency and consistency.
• An excellent command of the English language, corresponding to at least level C1.

Take a look at our Diversity, Equality & Inclusion Policy for more information.