Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
You will manage and tune the Cloudflare security stack, including WAF, DDoS protection, and Zero Trust policies to ensure secure and seamless network access. Additionally, you will administer perimeter firewalls, automate configurations using Terraform, and collaborate with engineering teams to secure services.
What they look for
Requirements
The role requires at least 4 years of experience in network or firewall security, with a minimum of 2 years specifically in Cloudflare. Candidates must possess strong skills in traffic analysis, scripting, and enterprise firewall management.
Full description
Who We Are
NEXT Ventures is where ambition takes shape and momentum becomes movement. As a global platform revolutionising access to performance-based capital, we empower the world’s most driven individuals to rise. Through our flagship brand, FundedNext, we empower dreamers to become doers, and potential to turn into performance. With 500+ driven minds across five countries, we power a global rhythm—220,000+ daily users from 170+ nations, each chasing greatness in their own way.
Your Role in Our Mission
You will secure the network edge. You will design, run, and tune our Cloudflare and firewall infrastructure so legitimate traders get seamless access and attackers get none.
How You’ll Make an Impact
- Own the Cloudflare security stack: WAF, DDoS protection, Bot Management, Rate Limiting, API Shield, and Zero Trust (Access, Gateway, WARP)
- Configure, test, and tune WAF custom rules and managed rulesets to protect both frontend and backend systems, cutting false positives and blocking emerging threats
- Keep internal tools, including OKR and other dashboards, off the public internet by enforcing Zero Trust Access policies and verifying they are not externally reachable
- Manage DNS, SSL/TLS, caching, Page Rules, Workers, and Load Balancing for performance and resilience
- Monitor web traffic metrics, analyse logs (Cloudflare Logpush to SIEM), and investigate anomalies and attacks
- Build and maintain automated alerting for traffic spikes, attack patterns, and misconfigurations, and mitigate issues before they affect traders
- Respond to DDoS and bot incidents; document runbooks and drive post-incident improvements
- Administer perimeter and internal firewalls and network segmentation across cloud and on-prem environments
- Maintain firewall rule hygiene, change control, and periodic access reviews
- Automate configuration with Terraform/IaC and the Cloudflare API
- Partner with SRE, DevSecOps, and Engineering to secure new services before launch
What You Bring
- 4+ years in network or firewall security, including 2+ years of hands-on Cloudflare experience
- Strong WAF rule-writing and traffic/log analysis skills
- Solid grasp of TCP/IP, DNS, HTTP/S, TLS, BGP basics, VPNs, and zero trust
- Experience with enterprise firewalls (e.g., Palo Alto, Fortinet, pfSense) and cloud security groups/NACLs
- Scripting and automation skills (Python, Bash) and IaC (Terraform preferred)
- Familiarity with SIEM tools, monitoring/alerting setups, and incident response workflows
Nice to Have
- Cloudflare certifications, CCNA/CCNP Security, Security+, or similar
- Fintech or high-traffic platform experience
Your Journey After Applying
- 30-minute HR Session with the Talent Acquisition team
- 60-minute Session with the Direct Supervisor
- 60-minute Session with Head of Tech
Why Join NEXT
At NEXT Ventures, performance is more than numbers — it’s the pulse that drives innovation and impact. Join us to architect a world-class performance and rewards ecosystem that shapes how success is recognized across continents. Be part of the team that turns ambition into achievement and potential into performance.
Your next chapter in global leadership begins here.
Similar roles
-
Cybersecurity development
Bosch Group Bengaluru, Karnataka, India
-
Cybersecurity GRC Professional
EY Greece Thessaloniki, Macedonia and Thrace, Greece
-
Identity and Access Management (IAM) Engineer | Cybersecurity
EY Greece Patras, Peloponnese, Western Greece and the Ionian, Greece
-
Staff Product Security Engineer, Cloud CISO
Google San Francisco, California, United States · $207K–$300K/yr
-
Senior Corporate Security Engineer
Nexthink Madrid, Community of Madrid, Spain · €72K–€100K/yr
-
Application Security Specialist
OPTIVEUM sp. z o.o. Swoyersville, Pennsylvania, United States · PLN 166K/yr