Description

You will own the security posture of web applications, network infrastructure, and cloud environments.

This role is hybrid.

Responsibilities

• Administer the F5 Distributed Cloud WAF platform, deploying policies, API protection, bot defense, and DDoS mitigation controls.
• Tune WAF rules to investigate false positives and optimize performance for onboarding applications.
• Mitigate OWASP Top 10 vulnerabilities, including XSS, SQL injection, and credential stuffing, by reviewing application architectures.
• Manage Palo Alto Networks NGFW and Prisma Access, handling SSL decryption, network segmentation, and site-to-site VPNs.
• Automate security operations using Python, Terraform, and REST APIs to build dashboards and reduce manual toil.

Required Skills

• 5+ years of experience in security engineering or related roles.
• Proficiency with F5 Distributed Cloud (XC) WAF, including API protection and bot management.
• Strong knowledge of Palo Alto Networks NGFW and Prisma Access configuration.
• Hands-on experience with Python, Terraform, and Git for infrastructure as code and automation.
• Deep understanding of application security risks: XSS, SQLi, SSRF, CSRF, and session hijacking.
• Experience with Kubernetes, containers, and DevSecOps/CI/CD pipelines.
• Bachelor's degree in Computer Science or equivalent technical experience.

Preferred Skills

• OWASP Foundation, CISSP, GIAC, or F5/Palo Alto certifications.
• Experience with threat hunting and security incident response.

Key Skills

Education

Bachelor's degree