Accountabilities

In this role, you will lead the engineering and operation of AI security controls while maintaining enterprise-grade network and edge protection. You will be accountable for deploying reliable solutions, improving security visibility, and ensuring that controls perform effectively in production. Your responsibilities will include:

AI Application Discovery and Governance: Build visibility into enterprise AI applications, coding assistants, agents, and MCP servers, including unsanctioned tools. Establish risk-based policies to allow, monitor, isolate, or block their use.

AI Data Protection: Design and optimize data loss prevention (DLP) controls for prompts, file uploads, model responses, and agent tool calls, protecting protected health information (PHI), personally identifiable information (PII), and financial data.

AI Runtime Security: Deploy protections for production AI applications and agents, including prompt injection and jailbreak detection, sensitive data identification, topic and output controls, token-based rate limiting, and secure audit logging.

AI Agent Access Management: Define authentication requirements and access permissions for AI agents interacting with internal systems. Ensure tool calls are logged and attributable to the relevant person or service, govern approved MCP connections, and block unauthorized access paths.

AI Gateway Management: Centralize traffic to large language model providers through managed AI gateways, enforcing security policies and providing usage, cost, and credential visibility. Ensure API keys are securely stored in secrets vaults rather than source code, configuration files, or pipelines.

Bot and Agent Protection: Collaborate with Product and Fraud Prevention teams to define how member-facing and employer-facing websites and APIs handle AI crawlers and agents, implementing appropriate controls through Cloudflare Bot Management.

Adversarial Testing: Conduct security testing against AI applications and agents, focusing on prompt injection, data exfiltration, tool misuse, and privilege abuse. Translate findings into stronger controls and detection capabilities.

Secure Architecture Collaboration: Partner with Application Security, Architecture, Data, Privacy, and Compliance teams to assess proposed AI use cases, develop secure reference architectures, and implement enforceable security requirements.

Cloudflare Platform Engineering: Own and operate Cloudflare services, including WAF, API Shield, Bot Management, DDoS protection, rate limiting, DNS, TLS, and Cloudflare One capabilities such as Access, Gateway, Tunnel, CASB, DLP, and Browser Isolation.

Application and API Protection: Protect member and employer applications against account takeover, credential stuffing, scraping, and other automated threats.

Infrastructure Automation: Manage Cloudflare configurations as code using Terraform, Git, peer review, and CI/CD pipelines. Develop custom controls using Cloudflare Workers when native capabilities are insufficient.

Palo Alto Networks Engineering: Operate next-generation firewalls across hardware, VM-Series, and Cloud NGFW environments, as well as Panorama, Strata Cloud Manager, Prisma Access, and GlobalProtect.

Network Security Policy Management: Design and maintain network segmentation, App-ID and User-ID policies, decryption rules, and security profiles covering Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security, and Enterprise DLP.

Firewall Lifecycle and Optimization: Maintain policy hygiene by identifying unused, shadowed, and overly broad rules. Manage PAN-OS upgrades, high availability, and timely responses to vendor security advisories.

Security Automation: Automate Palo Alto Networks operations through PAN-OS and Strata Cloud Manager APIs, Terraform, Ansible, and Python.

Detection Engineering: Integrate Cloudflare and Palo Alto Networks telemetry into the SIEM and develop detections for AI-related threats, including prompt injection attempts, sensitive information exposure, and unusual agent behavior.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1