Senior Application Security / WAF Engineer
Hiring Senior #Application #Security / #WAF #Engineer – F5 XC & AI Automation,
#Remote role ( #USA ),
JD as discussed :
The engineer will work directly with client security leadership to define strategy and milestones while remaining hands-on in building, tuning, and implementing policy.
The team is shifting from generic WAF rules to an application-by-application approach, leveraging AI to evaluate each application’s configuration, scan outputs, and live internet traffic in order to recommend and build tailored WAF policies that reduce internet-facing exposure.
Key Requirements
Proven hands-on experience with F5 XC (and ideally Andor/Silverline) for load balancing and WAF implementation.
Demonstrated ability to design and implement custom, per-application WAF policies rather than relying solely on broad rule sets.
Strong security focus with practical experience in web application vulnerability assessment and remediation.
Advanced automation skills to evaluate, recommend, and deploy policies at scale across a large portfolio; manual approaches are no longer viable.
AI/ML experience to ingest application scan outputs (from tools such as Snyk, BrightSec, Synack, and X-Bow), live traffic data, and application configurations to generate recommended WAF policies.
Ability to partner with security leadership on strategy while remaining deeply technical and hands-on.
Location: Remote - United States
Skills required for this job:
- Application security
- Automation
- F5
- Load balancing
- Machine learning
- Remediation
- Vulnerability assessment
- Web application firewall (WAF)