AI Security Research & Red Team Engineer

Hybrid. Posted 3 months ago

The role

You will drive security research and red team exercises to emulate real world attackers. The role focuses on improving security posture through testing AI, Agents, harnesses, and LLMs.

What you will do

Perform deep-dive research to identify AI-specific and general vulnerabilities
Identify AI-related attack surfaces through testing agentic implementations and LLM usage
Execute full-chain red team operations targeting global infrastructure and product ecosystems
Establish a framework for testing Security Efficacy against known TTPs
Collaborate with the Blue Team to translate findings into defensive improvements
Provide technical leadership and mentorship
Translate complex technical exploits into risk-based narratives for leadership
Act as a sparring partner for the Security Incident Response Team
Partner with Threat Detection and Threat Engineering to identify detection gaps
Operate as Customer Zero to drive resilience in products and processes

Required qualifications

4+ years in offensive security, application security or other relevant field
Deep knowledge of AI, Coding agents, LLMs, prompt engineering, AI-related attack vectors, and Agentic concepts
Strong background in manual penetration testing, exploit development, or cloud security (AWS/GCP/Bare Metal)
Experience using the MITRE ATT&CK framework
Ability to explain a complex 0-day exploit to a non-technical stakeholder
Knowledge of automated breach and attack simulation (BAS) tools
Knowledge of custom-built frameworks for payload delivery and C2 infrastructure

Benefits

Equity plan eligibility

Before you apply

Applicants may be asked to attend an in-person interview within a Cloudflare Office or Hub
Position may require access to information protected under U.S. export control laws
Employment may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license

About the company

Cloudflare runs one of the world’s largest networks to protect and accelerate Internet applications. The company aims to help build a better Internet.