Cloudflare

Mid

Hunt and neutralize BEC and phishing campaigns inside Cloudflare's PhishGuard managed email defense

This role sits inside Cloudflare's Cloudforce One / INTERDICT threat operations org, acting as the human intelligence layer that catches sophisticated email-borne attacks automated systems miss. You'll investigate flagged and customer-reported emails, hunt proactively for emerging BEC and vendor-fraud patterns, feed findings back into Detection Engineering's ML models, and guide customers through DMARC hardening. Expect deep questions on SPF/DKIM/DMARC mechanics, phishing/BEC investigation workflow, and how you'd use AI/LLM tooling in daily triage.