Senior Cloud Security Engineer

Salary: $90,000 – $110,000 per year

Senior Cloud Security Engineer – Cloudflare, WAF & API Security

Company: BMP Tec One PtY Ltd
Location: Sydney, NSW
Employment type: Full Time

Key selling points

• Deliver hands-on cloud and application security engineering.

• Build security tooling using Cloudflare Workers, JavaScript and Python.

• Collaborate with enterprise application, infrastructure and security teams.

About BMP Technologies

BMP Technologies provides technology consulting and delivery services to clients across Australia and New Zealand, supported by onshore and offshore teams. Our capabilities include cloud engineering, cybersecurity, software development, DevSecOps and managed services.

About the role

We are seeking a Senior Cloud Security Engineer to design, develop, implement and support cloud and edge security solutions.

Working closely with application developers, architects and infrastructure teams, you will protect enterprise applications and APIs, develop security automation and improve the effectiveness of security controls. This role combines hands-on engineering with troubleshooting, technical documentation and stakeholder collaboration.

Key responsibilities

• Design, implement and maintain Cloudflare security services, including WAF, bot protection, rate limiting and API security.

• Develop and support Cloudflare Workers for secure request handling, proxy services and custom security controls.

• Build and integrate security applications, diagnostic tools and automation using JavaScript, TypeScript or Python.

• Configure and tune managed and custom WAF rules to mitigate threats while reducing false positives.

• Implement and support Zero Trust access controls in collaboration with identity and infrastructure teams.

• Analyse application traffic, security logs and API behaviour to investigate threats and resolve security issues.

• Test and validate security controls before deployment, including regression testing, rollback planning and operational verification.

• Integrate security telemetry with SIEM and monitoring platforms.

• Collaborate with developers to remediate vulnerabilities and strengthen application and API security.

• Maintain technical designs, configuration documentation, deployment procedures and operational runbooks.

• Support incident investigation, service resilience and continuous improvement.

Essential skills and experience

• Demonstrated experience in cloud security, application security or cybersecurity engineering within enterprise environments.

• Strong hands-on experience with Cloudflare WAF, Workers, bot management and rate limiting.

• Practical development experience with JavaScript or TypeScript and scripting or automation skills in Python or PowerShell.

• Strong understanding of HTTP/S, DNS, TLS, reverse proxies, CDN architecture and web application traffic.

• Experience securing REST or GraphQL APIs, including authentication, authorisation and abuse prevention.

• Experience tuning WAF policies and investigating OWASP-related application threats.

• Ability to design, implement, test and support security solutions across the delivery lifecycle.

• Experience analysing security events using SIEM or observability platforms.

• Strong troubleshooting, documentation and stakeholder communication skills.

• Relevant qualifications in information technology, computer science or cybersecurity, or equivalent practical experience.

Desirable experience

• Cloudflare Access, Gateway, Tunnel, D1 or Workers KV.

• Akamai, F5 Advanced WAF/ASM, Imperva or comparable security platforms.

• AWS, Azure or Google Cloud security.

• Infrastructure as code, CI/CD and automated security testing.

• Kubernetes and container security.

• Familiarity with PCI DSS, ISO 27001 or SOC 2 control requirements.

• Relevant cloud, networking or cybersecurity certifications.

Apply now

Please apply through SEEK with your résumé and a brief summary of your experience with Cloudflare Workers, WAF and API security.

BMP Technologies welcomes applications from people of all backgrounds and values an inclusive workplace.