Cloudflare
AI Security Research & Red Team Engineer
$166K–$208K
Hybrid +2 · Full-time · Posted Aug 10, 2026
- Location
- Hybrid
Austin, TX, United States
New York, New York, United States - Experience
- 4+ years in offensive security, application security, or another relevant field.
- Visa sponsorship
- Any offer may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship for an export license.
About the job
Conduct AI-focused security research and red-team operations to uncover vulnerabilities, test defenses, and improve Cloudflare’s security posture.
What you'll do
- Research AI-specific and general vulnerabilities, and test agentic implementations and LLM usage for attack surfaces.
- Run adversary simulations and validate the effectiveness of security detections against known TTPs.
- Partner with response, detection, engineering, and compliance teams to turn findings into defensive improvements and report risks.
What they ask for
- Deep knowledge of AI, coding agents, LLMs, prompt engineering, AI-related attack vectors, and agentic concepts.
- Strong background in manual penetration testing, exploit development, or cloud security (AWS/GCP/Bare Metal).
- Experience using the MITRE ATT&CK framework to map coverage and identify defensive telemetry blind spots.
- Knowledge of automated breach and attack simulation tools and custom frameworks for payload delivery and C2 infrastructure.
Pay
USD 166,000 - USD 208,000 annual salary (base salary)
Tools
AWS, GCP, MITRE ATT&CK, WAF, EDR, SIEM, LLM
AI focus
Research AI-specific vulnerabilities and risks; test agentic implementations and LLM usage, including attack surfaces such as prompt injection and jailbreaking.
Model-written summary · the original posting is authoritative