[Hiring] Web Application Firewall Engineer @Vylor

Role Description

The Web Application Firewall Engineer is responsible for developing, evaluating and managing systems security across the enterprise. This role will work closely with the application development teams to assess applications in development as well as in production. The Web Application Firewall Engineer will help safeguard applications and data from threats and define and drive the implementation of these capabilities.

Primary Responsibilities - How will you help us Grow!

• Configure, tune, test, and optimize Web Application Firewall (WAF) policies and rules to protect web applications and APIs from threats such as OWASP Top 10 vulnerabilities, automated attacks, malicious payloads, and suspicious traffic patterns.
• Monitor WAF alerts, application traffic, and security events to identify threats, investigate anomalies, reduce false positives, and recommend appropriate remediation actions.
• Partner with application development, infrastructure, cloud, and network teams to understand application behavior, define security requirements, and implement WAF controls with minimal business disruption.
• Assist in the development and implementation of security policies and procedures.
• Instrumental in data security, regulatory compliance, DDoS mitigation, application protection, and threat detection.
• Prepare status reports on security matters to develop security risk analysis scenarios and response procedures.
• Enforce security policies and procedures by administering and monitoring security profiles, reviewing security violation reports and investigating possible security exceptions, updating, and maintaining and documenting security controls.
• Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.
• Provide direct support to the business and IT staff for systems security related issues.
• Participate in on-call to support WAF operations, respond to security events, troubleshoot urgent production issues, and coordinate timely escalation or remediation as needed.

Qualifications

• Bachelor's degree or equivalent experience preferred.
• 7–10 years of experience with WAF technologies and/or networking.
• Hands-on experience administering enterprise WAF platforms such as Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.
• Deep understanding of OWASP Top 10, API security, bot mitigation, DDoS protection, and web application attack patterns.
• Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.
• Knowledge of HTTP/S, TLS, DNS, CDN, reverse proxy, load balancing, and web application architectures.
• Experience partnering with application, infrastructure, cloud, and security operations teams to onboard and protect applications.
• Familiarity with SIEM/SOAR integrations, logging, alerting, incident response, and threat detection workflows.
• Ability to document standards, operational procedures, exceptions, and risk-based decisions.
• Preferred certifications could include CISSP, CSSLP, GIAC, AWS/Azure security, or vendor-specific WAF certifications.
• Strong analysis and problem-solving skills and the ability to develop processes and methodologies.
• Ability to rapidly learn and take advantage of new concepts, business models, and technologies.
• Ability to prioritize work to meet tight deadlines and customer needs.
• Ability to communicate effectively with strong oral, written, and presentation skills.

Benefits

• Numerous development opportunities offered to build your skills.
• Be part of a company with a higher purpose and contribute to making the world a better place.
• Health benefits for you and your family on your first day of employment.
• Four weeks of paid time off and two weeks of well-being pay per year, plus paid holidays.
• Excellent parental leave which includes a minimum of 16 weeks for mother and father.
• Future planning with our competitive retirement savings plan and tuition reimbursement program.