Senior Product Manager - Zero-Day Protection

• Join Cloudflare as Senior Product Manager for Zero-Day Protection, working fully remotely from the UK. • Help protect more than 20% of the Internet from HTTP-exploitable vulnerabilities and attacks. • Own the strategy, roadmap, execution and customer experience for Cloudflare's zero-day protection products, starting with WAF Managed Rules. • Shape how customers identify affected applications, deploy temporary mitigations, investigate active exploitation and remediate vulnerable software. • Work closely with the Cloudflare Security Research team to turn threat intelligence into product priorities. • Represent Cloudflare in the wider security community as a product and technical spokesperson.

• Bring strong product management experience, including strategy, roadmap ownership, discovery, prioritisation and cross-functional delivery. • Show technical fluency in HTTP applications, vulnerabilities, exploits and detection systems. • Synthesise input from security research, engineering, customers and commercial teams into clear product decisions. • Use customer empathy and strong product judgement to shape complex technical workflows. • Communicate clearly in writing and speech with both technical and non-technical audiences. • Thrive in a fast-moving, ambiguous security environment. • Lead across teams including Security Research, Engineering, Support, Customer Success, Solutions Engineering, Legal and Communications.

• Have security research, exploit-development or detection-engineering experience. • Know WAFs, managed rules, security-rule rollout, false-positive management, application security, threat intelligence or vulnerability management. • Understand Enterprise security operations, including APIs, automation, auditability, policy controls, logs and SIEM integrations. • Have experience with code scanning, software supply-chain security or exposure discovery. • Hold an established presence in the security research community through conference speaking, technical writing or press engagement.

• Own the strategy and roadmap for WAF Managed Rules and Cloudflare's wider zero-day protection experience. • Define how Managed Rules integrates with code scanning and exposure discovery to identify applications affected by new vulnerabilities. • Prioritise shared security primitives, telemetry and APIs that make emergency protections easier to automate. • Define workflows for creating, testing, deploying and auditing ad-hoc emergency policies. • Partner with Security Research, Legal and external researchers during coordinated disclosure to prepare customer protections and communications. • Own the end-to-end customer journey, from identifying affected applications to confirming remediation. • Build feedback loops with Support, Customer Success, Solutions Engineering and customers, and turn recurring friction into product priorities. • Write technical posts, customer guidance and product communications for researchers, customers and press.

We have used Cloudflare products ourselves, including Turnstile to protect apps from bots, so we know first-hand how solid their tech is, and that matters when you are thinking about where to work. With over $2.1 billion in annual revenue, 34% growth in Q4 2025, and $4 billion+ in cash reserves, Cloudflare is financially rock-solid and still growing fast. They operate one of the largest networks in the world, sit in front of roughly one in five websites, and are pushing hard into AI infrastructure and the agentic web. The scale of what they do is genuinely impressive; so many of the apps and services you use every day depend on Cloudflare without you even knowing it. Across Glassdoor, employees consistently highlight the great products, friendly and smart colleagues, positive working environment, and genuine flexible hybrid and work-from-home arrangements. They also offer unlimited paid time off and have a real focus on diversity and inclusion. We should be upfront, though: the Glassdoor rating sits at 3.4, and reviews are mixed. While the culture and people are widely praised, compensation competitiveness and slow promotion processes are recurring pain points. However, if you want to solve hard, Internet-scale problems at a company whose products you probably already rely on, Cloudflare is a brilliant place to do that.

• Work fully remotely from the UK. • Receive equity through Cloudflare's equity plan. • Enjoy flexible paid time off covering vacation and sick leave. • Take parental, pregnancy health, medical and bereavement leave under Cloudflare's leave programmes. • Access health, dental and vision benefits, with details varying by country. • Use fertility and family-forming benefits, plus mental health support and an Employee Assistance Programme. • Join an employee stock participation plan and retirement savings programme.

Cloudflare runs one of the world's largest networks, powering millions of websites and Internet properties for customers from individual bloggers to Fortune 500 companies. It protects and accelerates Internet applications without extra hardware or software. Cloudflare has been named to Entrepreneur Magazine's Top Company Cultures list and ranked among the World's Most Innovative Companies by Fast Company.