Cloudflare
Incident Response Analyst – React
Bengaluru, India· ONSITE
About the role
The analyst takes defensive actions at Cloudflare's edge, such as WAF rules and DDoS mitigation, and supports the full incident lifecycle from investigation to recovery. The role also studies targeted attacks to build tailored remediation plans for affected organizations.
What you will do
- Execute defensive actions at the edge (WAF rules, DDoS mitigation)
- Support investigation, containment, remediation and recovery
- Build customized remediation plans for compromised organizations
What they ask for
- Bachelor's in CS, IS, Cybersecurity or equivalent experience
- 5+ years in cybersecurity, including 2+ years of incident response
- Strong Windows knowledge; Unix/Linux/Mac familiarity
- Cloud knowledge (AWS, Azure, O365, Google Cloud, Cloudflare)
- L3/L4/L7 attack patterns
- Fluent English
- In-office in Bengaluru
- Offer may depend on authorization to receive US export-controlled technology without sponsorship
Nice to have
- BGP and routing
- Python or Go
- YARA rule writing
- Malware analysis and reverse engineering
- Bash
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Cloudflare. Confirm the final details with the original source or during the application process.
Posted 2026-06-24