Web Application Security Specialist

Web Application Firewall Engineer

Responsible for the overall strategy and operation of WAF environment

Develop a process to automate the inclusion of new applications to our WAF environment

Work closely with development teams to ensure proper alerting and blocking is in place

Evaluate network and application activity and ensure that proper WAF rules are in place

Provide technical and executive level reports to stakeholders on the performance of the company’s WAFs

Make recommendations to engineering and network teams on ways to improve the performance and security of applications

Experience securing enterprise applications using common web application technologies

Expert level understanding of cloud WAF technologies (Akamai, AWS, etc)

Ability to evaluate web traffic and identify threats

Solid understanding of web applications, web servers, application firewalls, frameworks and protocols with respect to web application development, deployment, and operation

Ability to work with different teams to find the best solution to a problem

Extensive knowledge of web technologies and concepts

Excellent understanding of DDoS techniques and mitigation mechanisms

Experience with Web Application Firewall management and rules

Excellent understanding of OWASP Risks, Vulnerabilities and Mitigation Mechanisms

Experience in exploiting web apps and web services security vulnerabilities including cross-site scripting, cross-site request forgery, SQL injection, DoS attacks, XML/SOAP, and API attacks.

Excellent logical and practical understanding of SSDLC

Experience with managing Web/Application Servers