Top Cybersecurity Jobs in Austin, TX

Lead technical insider threat investigations, perform digital forensics and threat hunting, develop detections and response playbooks, collaborate with Legal/HR/Privacy, and improve SIEM/EDR/DLP-based detection capabilities.

Lead architecture and technical strategy for threat detection and response across Cloudflare's network. Design and build large-scale data pipelines and edge/Cloud systems, develop AI-assisted workflows for threat hunting, mentor engineers, operate production services (Kubernetes, Workers), and participate in on-call incident response while collaborating with Threat Intelligence, Product, Legal, and Trust & Safety teams.

Lead and grow an engineering team building the Threat Events platform and external Threat Intel APIs. Own architecture, operational excellence, API performance, and integration of IOCs into products like WAF and Gateway. Hire and mentor engineers, collaborate with product and researchers, and ensure scalable, reliable data pipelines and on-call readiness.

Work on research projects in security, privacy, and systems at scale. Tasks include systems engineering, data analysis, protocol design, implementation, measurement, and open-source contributions. Interns are matched to projects in AI, distributed systems, privacy, or trusted execution environments and must communicate results clearly.

Detect and mitigate sophisticated platform threats in real time by analyzing network and metadata, developing detections and rules, tracking attacker TTPs and IOCs, and communicating actionable threat intelligence to technical and executive stakeholders. Collaborate with internal teams to build and document detection tooling and mentor others.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Design, build, run, and scale distributed tools and data pipelines to support threat disruption and platform abuse efforts. Translate legal and security requirements into scalable services, improve system architecture, monitor production (on-call), collaborate with Threat Intelligence, Legal and Product teams, and mentor other developers to promote testing and best practices.

Lead and deliver enterprise identity and access programs (workforce IAM, IGA) to enforce least-privilege and compliance. Drive stakeholder alignment, build automations and AI agents for program administration, manage roadmaps, OKRs, risks, change, and executive reporting while scaling access controls and remediation.

Build automated GRC solutions and maintain the GRC platform; architect AI governance for autonomous agents; support audit readiness (SOC 2, ISO 27001, PCI, FedRAMP) via automated drift detection and self-healing; and integrate security across Legal, People, Engineering, and Finance to enable developer-friendly compliance.

Conduct vulnerability scanning and in-depth analysis, triage and prioritize findings, produce remediation guidance, track remediation progress, and ensure processes and evidence meet DoD IL4 and FedRAMP compliance requirements while collaborating with engineering and compliance teams.