WAF Security Specialist (10+ years of experience)

Job Title: WAF Security Specialist (10+ years of experience)

Location: BROADWAY, NYC, NY ( onsite)

We are currently seeking candidates who meet the following qualifications:

Key Responsibilities

• Strengthen application security across the SDLC and DevOps processes.

• Conduct application security assessments and secure architecture reviews.

• Onboard, configure, tune, and monitor Akamai and Cloudflare WAF platforms.

• Optimize security tools and ensure consistent protection across externally facing and cloud-hosted applications.

• Analyze HTTP traffic, headers, payloads, and potential application attack vectors.

• Support development teams through security tooling, technical guidance, and coaching.

• Integrate and analyze security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs.

• Develop security dashboards, metrics, and repeatable governance processes.

• Collaborate with product teams, product owners, infrastructure, and cybersecurity leadership.

Required Skills and Qualifications

• Hands-on experience with Cloudflare WAF, including policies, rulesets, firewall rules, bot management, DNS, DDoS protection, and Logpush.

• Hands-on experience with Akamai WAF, including Kona Site Defender (KSD), Property Manager, Bot Manager, Edge DNS, and log staging/testing.

• Deep understanding of OWASP Top 10, application security principles, and secure development practices.

• Experience with SAST, DAST, and SCA tools such as Checkmarx, Burp Suite, Fortify, or equivalent tools.

• Experience analyzing HTTP traffic, headers, payloads, and application attack vectors, including XSS, SQL injection, RCE, deserialization, CSRF, and SSRF.

• Experience with cloud platforms such as Azure, AWS, and SaaS environments.

• Understanding of modern application architectures.

• Experience integrating security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

• Knowledge of information security, database security, and IT architecture.

• Familiarity with Java, Power Apps, .NET code development, and web development.

Additional Skills

• Application and database security.

• Information security principles and practices.

• Java and .NET development.

• Power Apps.

• IT architecture.

• Web development.
  
  
  
  Please submit your application via the link provided on LinkedIn. Do not call the general line.