Application Security Engineer with AWS, Cequence ,API Security(Remote)

LTM is a company focused on providing advanced technology solutions, and they are seeking a Senior Application Security Engineer with expertise in AWS and API Security. The role involves deploying and integrating security platforms across cloud and regulated environments while ensuring compliance and operational readiness.

Responsibilities:

• Cequence API Security Deployment
• Deploy and configure Cequence API Security across applicable cloud application and API environments
• Integrate Cequence with API gateways load balancers application endpoints and relevant traffic sources
• Configure API discovery inventory behavior analytics risk scoring and attack detection policies
• Enable runtime API protection bot mitigation abuse detection and OWASP API Security monitoring use cases
• Integrate Cequence s and findings with SplunkSOC workflows for investigation and response
• Develop deployment documentation integration guides runbooks and handover material for operations teams
• Wiz Federal Deployment CNAPP Engineering
• Deploy and configure Wiz Federal in AWS GovCloud or regulated cloud environments
• Onboard AWS accounts and workloads into Wiz Federal using approved connector and access models
• Configure CSPM CWPP vulnerability exposure management compliance policies and cloud risk dashboards
• Support attack path analysis cloud entitlement visibility prioritization of toxic combinations and workload risk reporting
• Integrate Wiz Federal findings with Splunk Cribl ticketing and operational workflows where required
• Support FedRAMP NIST 80053 FIPS CMMC and Zero Trustaligned cloud security controls
• Splunk Deployment SIEM Engineering
• Deploy and configure Splunk components including Indexers Search Heads Heavy Forwarders and Universal Forwarders
• Design and implement log ingestion parsing normalization field extraction indexing and retention strategies
• Onboard security telemetry from cloud network endpoint application API security and CNAPP platforms
• Develop dashboards s correlation searches reports and operational views for SOC and security engineering teams
• Troubleshoot ingestion issues parsing failures data gaps performance bottlenecks and platform health concerns
• Support Splunk integration with Cribl for routing filtering enrichment and ingestion optimization
• Cribl Deployment Telemetry Pipeline Engineering
• Deploy and configure Cribl Stream infrastructure to support secure and scalable telemetry routing
• Build pipelines for filtering enrichment transformation redaction sampling and destinationbased routing
• Integrate Cribl with Splunk cloudnative logging services security platforms and observability destinations
• Optimize data ingestion volumes improve log quality and reduce unnecessary SIEM storage and processing costs
• Configure secure source and destination connectivity certificates access controls and pipeline monitoring
• Create reusable data onboarding patterns and documentation for future tool and log source integrations
• Platform Integration Automation Handover
• Integrate Cequence Wiz Federal Splunk and Cribl into a unified security monitoring and response ecosystem
• Use APIs scripts and InfrastructureasCode practices to standardize repeatable deployments where applicable
• Collaborate with SOC teams to align s dashboards data models and investigation workflows
• Prepare deployment plans configuration workbooks architecture diagrams operational runbooks and knowledge transfer material
• Support testing validation troubleshooting golive readiness and transition to steadystate support teams

Requirements:

• Application Security - API Security testing
• AWS Cloud Architecture
• Cequence API Security
• Wiz Federal Wiz CNAPP
• Splunk Enterprise Splunk Cloud
• Cribl Stream
• AWS GovCloud
• AWS CloudTrail Security Hub GuardDuty Security Lake
• IAM federation access governance
• Zero Trust and cloud security architecture
• Terraform or CloudFormation
• Python PowerShell Bash
• REST APIs and platform integrations
• CICD and deployment automation
• Log parsing normalization route
• Performance Monitoring- Cloud Native (Aws Cloud Watch, Azure Cloud Monitor) - Testing