Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties
Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS mitigation security policies
Perform log analysis to identify malicious traffic patterns, false positives, and opportunities for tuning
Contribute to automation efforts (infrastructure as code, CI/CD integrations, scripts) to deploy and maintain security configurations
Identify security vulnerabilities and guide developers and engineers in addressing these issues
Participate in on-call rotation as a subject matter expert for WAF/DDoS incident response
Partner with product, engineering, and operations teams to integrate WAF/Edge security controls into applications and services
Research and stay current on the latest attack vectors, vulnerabilities, and exploits affecting web and API applications
Recommend and implement improvements to strengthen defenses across the edge/perimeter layer

3+ years of experience working with, configuring, and maintaining web application firewalls (WAF)
Knowledge of web application attack techniques and common vulnerabilities (i.e. OWASP Top 10)
Detailed understanding of the threats faced directly to consumer and digital platform organizations
Proven expertise with at least one major WAF platform (Akamai, Fastly NGWAF, AWS WAF, Azure, or similar)
Familiarity with log analysis tools, scripting (Python, Bash, PowerShell), and automation frameworks
Proven hands-on experience engineering across one of the various Cloud Providers (AWS, GCP, Azure)
Strong problem-solving skills with the ability to quickly analyze issues and implement effective mitigations
Excellent collaboration and communication skills across security, engineering, and product teams

Perimeter Security Engineer

Key skills