Senior Incident Response Analyst - REACT

About the role

About Us At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks.

What you'll do

• Cloudflare is a system spanning the globe, on a mission to make the Internet safer and more powerful every day. To help fulfill this mission, we are seeking an incident response Analyst / Consultant to join our Cloudforce One REACT organization.
• In this role, you will respond to active customer attacks across two primary tracks:
• 1) L7 mitigations — bot abuse, web scraping, credential stuffing, and WAF/API abuse.
• 2) L3/L4 mitigations — volumetric and protocol DDoS attacks.

What they're looking for

✦ Select any requirement to ask Aptiora about your fit, evidence or application.

• 3+ years of hands-on experience in SOC, incident response, or detection engineering.
• Proven experience deploying mitigations that affect live customer traffic — not only monitoring or investigation.
• Hands-on with at least one of the following: WAF rules/actions, DDoS protection controls, bot mitigations, rate limiting/challenge policies.
• Strong incident process discipline: triage → scope → mitigate → verify → communicate.
• In-depth understanding of Windows operating systems and general knowledge of Unix/Linux/Mac environments.
• Familiarity with cloud environments (AWS, Azure, O365, Google Cloud) and cloud IR methodologies.
• Strong technical knowledge of common network protocols and design patterns (TCP/IP, HTTPS, SSH, RDP, SMB, DNS).
• Solid understanding of MITRE ATT&CK and the NIST Cybersecurity Framework.
• Excellent verbal and written English communication skills with a proven ability to establish relationships and clearly explain complex technical findings to executive and technical clients.