Sr WAF Engineer (F5 Focused) - 100% Remote

Simple Solutions • Remote (Jacksonville, Jacksonville, United States) • 3w ago

Title: Sr WAF Engineer (F5 Focused) - 100% Remote

Duration: 6-12+ Months

Location: Remote 100%

RESPONSIBILITIES:

Develop and refine complex custom "Web Application Firewall" (WAF) rules and features, ensuring mitigation of Minimum Viable Product (MVP) and security posture gaps.
Coding expertise to create effective testing mechanisms for baseline and custom WAF rules, integrating these tests seamlessly into automation pipelines.
Offer subject matter expert (SME) support in various security testing areas, including WAF Proofs of Concept (PoCs)
Provide specialized WAF-focused advice on web and API attack methodologies, evasions, and mitigation techniques, leveraging your ethical hacking background.
Contribute to DevSecOps / DevOps with security testing expertise to enhance the automation aspects of the project.

Requirements:

Utilize ethical hacking skills to safeguard the organization from web-based attacks, ensuring the protection of operations, reputation, and customer trust.
Conduct in-depth technical evaluations of WAF solution rule sets, focusing on detection and prevention of web and API security threats.
Develop custom WAF rules and features, addressing gaps and enhancing overall security measures.
Identify and counter technical strategies that bypass WAF solutions.
Design and implement testing protocols to evaluate the effectiveness of various security initiatives, including WAF rules and new features.
Facilitate the integration of testing procedures into CI/CD pipelines
Reverse-engineer attacker tactics to create effective mitigation rules.
Maintain and secure essential documentation and reports, ensuring traceability and compliance.
Inform the EPS Management team about emerging threats and vulnerabilities, recommending countermeasures.
Communicate effectively with a range of stakeholders, providing updates on security-related matters
Strong background in ethical hacking
Extensive experience with web-based attack methodologies, including knowledge of tools, payloads, exploits, and countermeasures.
Proficient in web application and API security.
Skilled in identifying and mitigating WAF/IPS/CSPM security vulnerabilities.
Expertise in developing custom WAF rules and security testing packages.
Solid understanding of OWASP top 10 vulnerabilities.
Proficiency in at least one programming language
Ability to automate security testing within CI/CD pipelines.
Knowledgeable in networking, cloud firewalls, and web technologies.
Strong grasp of DevSecOps principles and practices.
Awareness of Agile methodologies

Related Jobs

Chief Information Officer

Fleet Landing WELLInspired Living • Atlantic Beach, FL, US • 1d ago

1d ago

Fraud Analyst

BMO U.S. • Jacksonville, FL, US • $41.72k - $73.80k / year • 2w ago

2w ago

Payroll Team Lead

Bank of America • Jacksonville • 2w ago

2w ago

New Accounts Supervision Principal – Supervision Principal II

Bank of America • Jacksonville • 2w ago

2w ago

Manual Ethical Hacker

Bank of America • Jacksonville, FL, US • $125k - $145k / year • 2w ago

2w ago

Junior Software Tester/Technical Documentation Writer

Jobs for Humanity • Jacksonville, Florida, United States • 3w ago

3w ago

News Reporter

San Francisco Chronicle • Jacksonville, United States • 3w ago

3w ago

Sr Vault Systems Architect - REMOTE

Simple Solutions • Remote (Jacksonville, Jacksonville, United States) • 3w ago

3w ago

Systems Engineer (Windows)

Noblesoft Solutions • Jacksonville, Florida, United States • 3w ago

3w ago

Network Systems Engineer

Elite Workforce • Jacksonville, Florida, United States • 3w ago

3w ago