Security Engineer – NDR & Cloudflare

About the role

Core42 is looking for an experienced Security Engineer to lead the design, implementation and continuous improvement of its Corelight Network Detection & Response (NDR) and Cloudflare security platforms. The role will enhance network visibility, threat detection, Zero Trust, DDoS protection and web‑application security across enterprise and cloud environments.

Key responsibilities

• Deploy, manage and maintain Corelight sensors across on‑premise, cloud and data‑centre environments.
• Develop and optimise detection use‑cases using Zeek, Suricata, Smart PCAP, YARA and threat‑intelligence feeds.
• Integrate Corelight telemetry with SIEM and SOC platforms, monitor health and capacity.
• Conduct proactive threat hunting and create behavioural, anomaly‑based detections aligned with MITRE ATT&CK.
• Design and operate Cloudflare security services: WAF, bot management, rate limiting, API security, DNSSEC, and Zero Trust Access.
• Manage DDoS protection, Magic Transit, Magic Firewall and Magic WAN services.
• Investigate network‑based attacks, perform packet analysis, support malware forensics and lead incident triage.
• Develop and maintain incident‑response playbooks.

Required profile

• Proven experience in network detection, threat hunting and security operations.
• Strong understanding of Zero Trust principles and cloud security architectures.
• Ability to collaborate with Platform Engineering, SOC, Network, Cloud and Architecture teams.

Required skills

• Corelight NDR platform
• Zeek and Suricata
• YARA
• SIEM integration
• MITRE ATT&CK framework
• Cloudflare WAF, Bot Management, Rate Limiting, API Security, DNSSEC, Access, Secure Web Gateway, Browser Isolation
• DDoS protection, Magic Transit, Magic Firewall, Magic WAN
• Network forensics, packet analysis, incident response, threat hunting