Senior Product Manager - Zero-Day Protection

The role

You will own the strategy, roadmap, execution, and customer experience for zero-day protection products, starting with WAF Managed Rules. You will work to protect the Internet from HTTP-exploitable vulnerabilities and attacks.

What you will do

• Own the strategy and roadmap for WAF Managed Rules and zero-day protection experience.
• Partner with product and engineering teams to help customers identify exposure and deploy mitigations.
• Define how Managed Rules integrates with code scanning and exposure discovery.
• Prioritize shared security primitives, telemetry, and APIs.
• Define workflows for creating, testing, deploying, and auditing ad-hoc emergency policies.
• Partner with Security Research team to turn research into product priorities.
• Partner with Security, Legal, and external researchers during coordinated disclosure processes.
• Discover and prioritize Enterprise operational needs with customers and internal teams.
• Own the end-to-end customer journey for identifying and remediating vulnerabilities.
• Write technical posts, customer guidance, and product communications.

Required qualifications

• Strong product-management experience, including strategy, roadmap ownership, discovery, prioritization, and cross-functional delivery.
• Technical fluency to understand HTTP applications, vulnerabilities, exploits, and detection systems.
• Ability to synthesize input from security research, engineers, customers, and commercial teams into clear product decisions.
• Customer empathy and strong product judgment, especially for complex technical workflows.
• Excellent written and verbal communication for technical and non-technical audiences.
• Comfort operating in a fast-moving, ambiguous security environment.
• Strong cross-functional leadership across multiple teams.

Nice to have

• Security research, exploit-development, or detection-engineering experience.
• Experience with WAFs, managed rules, security-rule rollout, false-positive management, application security, threat intelligence, security operations or vulnerability management.
• Experience with Enterprise security operations, including APIs, automation, auditability, policy controls, logs, and SIEM integrations.
• Experience with code scanning, software supply-chain security, or exposure discovery.
• An established presence in the security research community, conference speaking, technical writing, or press engagement.

Benefits

• Medical/Rx Insurance
• Dental Insurance
• Vision Insurance
• Flexible Spending Accounts
• Commuter Spending Accounts
• Fertility & Family Forming Benefits
• On-demand mental health support and Employee Assistance Program
• Global Travel Medical Insurance
• Short and Long Term Disability Insurance
• Life & Accident Insurance
• 401(k) Retirement Savings Plan
• Employee Stock Participation Plan

Before you apply

• Applicants who progress to the offer stage may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs.
• Offer of employment may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.

About the company

Cloudflare runs one of the world’s largest networks that powers millions of websites and other Internet properties. The company protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code.