Security Engineer - NDR & Cloudflare

About the role

Core42 is looking for an experienced Security Engineer to lead the design, implementation and continuous improvement of its Network Detection & Response (NDR) and Cloudflare security platforms. You will work across enterprise and cloud environments to enhance visibility, threat detection, Zero Trust controls and incident response capabilities.

Key responsibilities

• Deploy, configure and maintain Corelight sensors across data‑center, cloud and on‑premise networks.
• Develop and tune detection use‑cases using Zeek, Suricata, Corelight Smart PCAP, YARA and threat‑intelligence feeds.
• Integrate Corelight telemetry with SIEM and SOC tools, and establish baseline and anomaly detection.
• Design, manage and optimise Cloudflare services including WAF, bot management, rate limiting, API security, DNSSEC and custom security rules.
• Implement Zero Trust access, Secure Web Gateway, browser isolation and device‑trust controls via Cloudflare Access.
• Provide DDoS protection, Magic Transit, Magic Firewall and Magic WAN network security services.
• Conduct proactive threat hunting, network forensics and packet analysis to investigate attacks.
• Develop and maintain incident response playbooks and support triage and containment activities.

Required profile

• Proven experience in network security engineering, NDR platforms and cloud security solutions.
• Strong understanding of enterprise networking, traffic flows and security monitoring.
• Ability to collaborate with Platform Engineering, SOC, Incident Response and Cloud Architecture teams.

Required skills

• Corelight NDR platform
• Zeek and Suricata
• YARA rule development
• MITRE ATT&CK framework
• Cloudflare security suite (WAF, DNSSEC, Access, Magic Transit, Magic WAN)
• SIEM integration and SOC workflows
• Network forensics and packet analysis
• Threat hunting and detection engineering