About the Role
Software Engineer, DDoS
Location: London, UK
Job Description:
About Us
At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the worlds largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazines Top Company Cultures list and ranked among the Worlds Most Innovative Companies by Fast Company.
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us!
Available locations:
Hybrid – Austin, US | Lisbon, Portugal | London, UK
Remote – US
About the team
The mission of the DDoS engineering team at Cloudflare is to make DDoS attacks a thing of the past. We create Internet-scale systems that analyze and mitigate the largest DDoS attacks in the world. Our systems operate across one of the largest networks on the Internet and protect nearly 20% of all websites. Because of our scale and reach, were consistently on the front line in the battle against new and emerging threats, and the work we do on this team has an outsized impact in helping Cloudflare build a better Internet.
Our team is responsible for a large number of different systems. Our tooling and mitigation systems are primarily written in Rust, but we also use Lua, C, and eBPF. Our analytics systems are primarily written in Go, and they leverage Kafka and ClickHouse. All of our analysis and mitigation operates in real-time to process massive amounts of data.
What you’ll do
Your most important responsibility as a member of the DDoS engineering team is to ensure that Cloudflare and our customers remain available in the face of DDoS attacks. Toward that end, your job will be to help us enhance the automation that detects and blocks attack traffic. Some examples of potential future project work include building continuous profiling systems to understand customer traffic patterns, monitoring the health of customer origins, building new ways to customize detection and mitigation behavior, and enriching analytics to provide customers with more actionable data.
Responsibilities
- Build and enhance the software that automates DDoS detection and mitigation
- Analyze data and identify patterns to strengthen our attack detection and mitigation
- Build and enhance the internal tooling that supports our systems
- Monitor telemetry to improve performance and ensure system health
- Communicate your knowledge and expertise of DDoS within the broader organization
- Provide last-line support for SOC and Escalation Engineers, which can require off-hours availability in extraordinary cases
Examples of desirable knowledge and experience
- Knowledge of core Internet protocols (IP, TCP, UDP, DNS, TLS, HTTP, HTTP/2, HTTP/3, QUIC)
- Knowledge of common types of network and application-layer DDoS attacks
- Knowledge of common web application architectures
- Experience with Rust, C, Go, or other systems languages
- Experience building large-scale distributed systems
- Experience analyzing large time-series datasets, preferably including SQL
- Experience with the Linux network stack, and specifically eBPF
- Experience with Prometheus, Grafana, and Kibana
- Experience with SaltStack and Kubernetes
A higher-education degree is not required for this role.