Customer Security Compliance Specialist, Cloudflare
$125-172k
+ Equity
More information about location
Web performance and security platform
Be an early applicant
Web performance and security platform
1001+ employees
Be an early applicant
$125-172k
+ Equity
More information about location
1001+ employees
Company mission
To help build a better Internet that is bold and ambitious.
Role
Who you are
- 5–10 years of experience in security compliance, GRC, technical audit management, IT risk consulting, or customer-facing security assurance
- Demonstrated ability to build with AI: A hands-on builder mindset with proven experience experimenting with, building on, or configuring AI workflows (e.g., prompt engineering, retrieval-augmented generation concepts, API-based automations, or internal agent configurations) rather than relying solely on packaged third-party software
- Control frameworks: Solid understanding of security risk and compliance frameworks such as PCI DSS, ISO 27001, SOC 2, and NIST SP 800-53
- Technical writing & translation: Strong written communication skills with the ability to translate complex networking, infrastructure, and cryptographic concepts into clear, plain-language customer responses and white papers
- Customer-facing communication: Highly comfortable and articulate when presenting to or answering questions from external customers, sales executives, and legal counsel
- Cross-functional leadership: Comfort partnering across Sales, Product, Legal, and internal Platform/AI Engineering teams to drive projects forward
- Technical curiosity: Familiarity with data structures, markdown, APIs, or basic scripting (e.g., Python, SQL, or shell) to prototype solutions and inspect model outputs effectively
- Bonus points: Practical cloud/network engineering experience, deep familiarity with global privacy regulations (GDPR, CCPA), or experience establishing automated operational metrics
What the job involves
- You will join the Customer Compliance Team, which is focused on building trust with customers through sharing information about Cloudflare’s security program and policies
- We assist our Customers, Sales teams, and Legal teams in understanding Cloudflare’s security posture. In this role, you will develop into an SME across Cloudflare’s products, infrastructure, and controls
- As part of this mission, you will actively build with and leverage Cloudflare’s proprietary, in-house AI platforms and developer tooling to eliminate manual bottlenecks, scale compliance operations, and dramatically accelerate our response times to customer inquiries
- Security Questionnaires & RFPs: Take ownership of filling out complex customer security questionnaires, RFPs, and technical assessments. You will do this by orchestrating our internal AI generation pipelines to draft responses, paired with your own expert human-in-the-loop validation to ensure high accuracy
- Engage with Customers on Security Topics: Act as a trusted security advisor by engaging directly with enterprise customers on security topics. You will meet with customer security teams to resolve deep architectural inquiries, answer specific security questions, and assist legal teams with security terms in contract negotiations
- Facilitate Customer Audits: Host, coordinate, and facilitate both on-site and virtual customer audits when customers execute their right to audit, guiding them through our security controls, processes, and compliance evidence
- Build with In-House AI Tools: Design, configure, and iterate on custom workflows and compliance assistants using Cloudflare’s internally built AI platforms to automate questionnaire triage and security evidence retrieval
- Curate AI-Ready Ground Truth Data: Structure, audit, and maintain authoritative knowledge repositories covering SOC 2, PCI DSS, ISO 27001, and global security regulations, ensuring our in-house AI models retrieve verified, up-to-date compliance data
- Public Enablement & Trust Portal: Collaborate with marketing and engineering to mature our customer Trust Portal and self-service resources, making it easy for prospects and enterprise customers to evaluate our security posture independently
- Author Public Security Content: Research, write, and maintain public-facing white papers, security blogs, and compliance mappings aligned with Cloudflare’s evolving product suite and global regulatory shifts
Our take
Cloudflare is a multi-service global network that provides web security and infrastructure, DDoS mitigation services, and a content delivery network. Founded in 2009, Cloudflare has risen to become an industry giant, with over 25 million global internet properties on its network.
Cloudflare has been responsible for a number of admirable initiatives, offering free web protection to human rights groups, journalists, artists, and US election websites. This goes some way to counteracting the flak Cloudflare has received in some circles for the controversial groups and users who use its services. This chequered history, however, has not affected its over 80% market share in the content delivery network field.
This is perhaps in part because it has proven sharp at staying abreast of the rapidly morphing tech and digital space and customer demands. For example, Cloudflare is shifting to 100% renewable energy usage to create a zero-emissions internet, and in 2020 released a feature that would help users navigate data privacy regulations by selecting where their data is stored.
And impressive third-quarter 2025 results show strong momentum, with revenue rising to $562 million from $430 million a year earlier. The company also raised its full-year guidance, underscoring confidence in continued growth. As demand for secure, cloud-based infrastructure keeps growing, Cloudflare's expanding platform and improving efficiency leave it well positioned to capture further gains in a rapidly growing market.
Steph
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Company benefits
- Competitive pay: We offer a competitive total rewards package, where every employee is an owner of our stock.
- Take-what-you-need vacation: We encourage employees to find a comfortable work-life balance by taking as many days off as they need while still being able to perform their jobs satisfactorily. (We really mean it!)
- Paid maternity & paternity leave: Our global parental leave policy allows up to sixteen paid weeks of bonding leave time for all qualifying new parents.
- Employee benefits: We offer a comprehensive benefits package including healthcare, life insurance, short- and long-term disability, pension plans in accordance with the market practice in our locations.
- Commuter program: We are flexible about where we work and value connecting at the office. Our commuter benefits program is in place to support team members' commute to work via public transportation without the extra cost burden.
- Wellbeing: Global offerings that provide mental health, childcare and family forming support to our employees across our offices.
Company HQ
China Basin, San Francisco, CA
Leadership
Lee Holloway
(Co-Founder & Lead Engineer)Lee began their career as an Engineer at Homewarehouse for a year before working at Unspam Technologies for 4 years. They co-created Project Honey Pot in 2004 and Cloudflare in March 2009, serving as Lead Engineer of both to present.
Michelle Zatlyn
(Co-Founder, President & Co-Chair)Having worked for Investor Economics and I Love Rewards for a combined 4 years, Michelle worked at Toshiba for 3 years as a Product Manager. She then co-founded Cloudflare in 2009 as COO, and has served as President since 2020. She is also a Board Member at Atlassian.
Matthew Prince
(Co-Founder & CEO)Matthew studied for an MBA at Harvard Business School before co-founding Unspam Technologies in December 2001, and Cloudflare in 2009, where he has served as CEO ever since.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 191 more jobs at Cloudflare