Requirements

Expected technologies

AWS

Google Cloud Platform

Operating system

Linux

Our requirements

• Proven experience in Web Application Security and Protection tooling
• Strong understanding of web application vulnerabilities and OWASP threat models
• Expertise with WAF platforms such as AWS WAF, Akamai Kona, or F5 ASM
• Deep knowledge of API security, including token-based authentication and gateways
• Solid grasp of vulnerability scanning tools and automated security integration
• Hands-on experience in threat modeling and mitigation
• Proficiency in cloud security, especially within AWS or GCP environments
• Excellent problem-solving skills with strong analytical thinking
• Ability to communicate complex technical topics to non-technical stakeholders
• Experience collaborating across global, cross-functional security teams

Optional

• Familiarity with secure development principles and modern coding languages
• Understanding of bot mitigation and automated attack prevention techniques
• Knowledge of anomaly detection and behavioral security analytics
• Background in network security architecture for large-scale enterprises
• Experience working in highly regulated financial environments

Your responsibilities

• Designing and deploying Web Application Firewalls (WAFs) to protect critical applications
• Monitoring and fine-tuning WAF rules for effective mitigation of threats
• Integrating vulnerability scanning tools with WAFs for automated threat response
• Conducting threat modeling to identify and address application security risks
• Collaborating with DevSecOps and infrastructure teams to align protection strategies
• Reviewing security policies and adapting them to evolving threats
• Leading incident response efforts related to web application attacks
• Supporting secure design and deployment in cloud-based environments
• Advising on secure development practices to reduce application-layer vulnerabilities
• Documenting security configurations, procedures, and best practices