Application Security Engineer (New York City Metropolitan Area)

Title: Application Security Engineer

Location: NYC NY

Onsite Role

Duration: 12+ Months

Technical Requirements -

1. 5+ years Hands‐on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
2. 4+ Hands‐on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
3. Deep understanding of OWASP Top 10, application security principles, secure development practices.
4. 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
5. Experience analyzing traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
6. Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
7. Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.