Senior Cyber Security Engineer

Position Summary We are seeking a Senior Cybersecurity Engineer to lead the design, implementation, and support of enterprise web application and network security solutions. This role will be responsible for securing internet-facing applications through F5 Distributed Cloud WAF, API security, bot protection, and network security technologies including Palo Alto firewalls and secure remote access solutions.
The ideal candidate possesses a blend of application security, network security, and cloud security experience and is passionate about protecting critical enterprise services.
Responsibilities Web Application Security Administer and support F5 Distributed Cloud (XC) WAF platform. Deploy and maintain WAF policies, signatures, and security controls.

Qualifications:Experience with:Bot ManagementAPI SecurityDDoS ProtectionCDN technologiesDevSecOpsCI/CD pipelinesKubernetesContainersTerraform
Preferred Certifications: OWASP Foundation certificationsISC2 CISSPGIAC certificationsF5 certificationsPalo Alto Networks certifications

Configure: API Protection Bot Defense DDoS Mitigation Geolocation Policies Rate Limiting CAPTCHA Challenges Investigate and tune false positives. Perform application onboarding into WAF services. Conduct WAF policy reviews and optimization. Support incident response involving web application attacks. Application Security
Understand and mitigate: OWASP Top 10 Authentication attacks API abuse Credential stuffing Session hijacking Cross-Site Scripting (XSS) SQL Injection SSRF CSRF Review application architectures and recommend security improvements. Partner with development teams during application onboarding and troubleshooting. Network Security
Administer and support: Palo Alto Networks NGFW Prisma Access Site-to-site VPNs SSL decryption NAT and security policies Network segmentation DNS and routing troubleshooting Support production incidents and participate in on-call rotation. Cloud & Automation Develop automation using: Python REST APIs Terraform Git Build dashboards and reporting around security posture. Automate repetitive operational tasks. Security Operations
Participate in: Incident response Threat hunting Security assessments Vulnerability remediation Root cause analysis Architecture reviews