Web Application Firewall Engineer

Job Title: Web Application Firewall Engineer

Work Location:

Position Description

The Web Application Firewall Engineer position at Ally is a member of the Information Protection & Risk Management organization and works closely with other members of the IPRM program to develop, implement and support a wide range of critical security controls at Ally. The engineer works with a team of security engineers within the Cyber Security Technology group to deploy, sustain and monitor technical controls and tools to meet specific security requirements, and help with defining processes to ensure that security configurations and tools are maintained.

Job Responsibilities

• Operations and monitoring and day to day troubleshooting forweb application firewalls (F5 and Akamai)across the enterprise.

• Provide expert level troubleshooting for supported technologies

• Perform architecture and engineering responsibilities in support of existing technologies and new security projects

• Perform regular health checks and user activity audits

• Author and vigilantly maintain documents related to the design, purpose, operation, and management of security applications

Qualifications

• Minimum 5 years knowledge and experience with deployment and maintenance of enterprise web application firewall products: Akamai Kona, F5 ASM/AWAF, Salt API Protection.

• Primary responsibility is support of our security infrastructure and security projects with potential to take on responsibilities for other network security technologies such as Network Access Control, Firewall etc

• Must have good working knowledge of troubleshooting techniques: performing and analyzing the results of packet captures, CLI commands, familiarity with network protocols

• Understand application layer TCP/IP Layer 7 security fundamentals

• Ability to analyze application logs and work with developers to ensure secure coding practices are in use

• Bachelor\'s degree in information systems or relevant field of study

• Excellent communications skills (verbal and written) are required.

• Ability to interact with personnel at all levels across the organization and to comprehend business imperatives.

• A strong customer/client focus with ability to manage expectations appropriately and provide superior customer/client experience and build long-term relationships.

• Willing to have a flexible work schedule and be on call for incident resolution

• Coding/Scripting experience such as Python or PowerShell to automate tasks is a bonus.