Waf And Security Automation Specialist Jobs

CAPCO WAF & Security Automation Specialist About the Role We are thrilled to announce an exciting opportunity for a Technical Delivery Specialist to take the lead in coordinating Web Application Firewall (WAF) onboarding and related infrastructure activities within a dynamic banking environment! This is not a hands-on cybersecurity engineering role , and guess what? Previous cybersecurity experience is not required ! We’re looking for someone eager to dive into the world of technical coordination and delivery. Your mission will be to collaborate with application owners, developers, architects, infrastructure teams, and other stakeholders to ensure that WAF implementations and related changes progress smoothly and successfully. If you thrive in a complex banking/enterprise technology environment and enjoy managing multiple stakeholders while independently overseeing smaller technical projects, this is the role for you! What You'll Be Doing Coordinate WAF onboarding for applications from the initial request through to implementation and production/blocking mode. Collaborate with application owners, architects, developers, infrastructure teams, and WAF engineers to keep implementations moving forward. Coordinate WAF testing, tuning, and production changes to ensure optimal performance. Track actions, dependencies, blockers, and delivery dates to keep everything on track. Coordinate Change Requests (CRs) and implementation schedules like a pro! Manage several smaller technical initiatives/workstreams simultaneously with finesse. Maintain Jira boards, tickets, and delivery backlogs to keep everything organized. Coordinate infrastructure-related activities such as servers, load balancers, firewall rules, and certificates. Support improvements and automation of existing WAF processes to enhance efficiency. Coordinate operational activities such as patching, compliance requirements, and Disaster Recovery testing. Support urgent security changes, including the coor

Responsibilities: Act as Escalation Point of Contact: Serve as the primary Level 3 escalation point for resolving complex network infrastructure, routing, and security configuration issues across both on-premise Data Centers and AWS environments. Maintain Multi-Vendor Security & Perimeter Solutions: Responsible for the configuration, maintenance, and optimization of FortiGate Firewalls (On-Prem & AWS), Cisco ASA Firewalls, and Akamai WAF / Anti-DDoS solutions protecting core endpoints. Manage Core Network & Infrastructure Services: Identify and resolve network issues, bottlenecks, and vulnerabilities across Arista core/access switches, Cisco routers, F5 Load Balancers (LTM/GTM), and Infoblox (DNS/DHCP). Develop & Maintain Architecture Documentation: Develop and maintain comprehensive documentation on network topology, hybrid cloud designs, system security configurations, and operational SOPs. Bridge Infrastructure and DevOps (IaC): Bridge the gap between development and operations by embracing "Infrastructure as Code" (IaC) in close collaboration with DevOps teams to automate network deployments and security workflows. Integrate AI & Network Task Automation: Research and leverage automation/AI tools (e.g., Tines, n8n, Dify) for Security Orchestration or network task automation to improve operational efficiency. Provide Support During Non-Office Hours: Provide non-office hour escalation support whenever needed during major live cutovers or critical network emergencies. Requirements: Relevant education in Computer Science, Information Systems, or a related technical discipline, or equivalent practical experience. Hands-on experience operating and troubleshooting production networks across on-premises data centers and AWS environm

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. The Role As a Senior Security Engineer, you'll harden the security posture of our AWS environment and our software development pipeline. Cloud Security and vulnerability management in Wiz are the primary focus. You'll partner with DevOps, Engineering, and our Application Security Engineer to build preventative controls across infrastructure, identity, and CI/CD. The work is hands-on: configuring tooling, reviewing architecture, hardening pipelines, and supporting application security work where your range is needed. Key Responsibilities Own cloud security posture across our AWS environment using Wiz and AWS-native services, reducing risk across IAM, network segmentation, container security, secrets, and data exposure. Establish secure defaults in our Infrastructure as Code through reusable modules, guardrails, and policy as code. Harden CI/CD pipelines in partnership with DevOps. Run vulnerability management across cloud and application findings: intake, prioritization, SLA tracking, and remediation with engineering. Build automation that scales the program: ingestion, deduplication, prioritization, and developer-facing workflows. Instrument telemetry, alerting, and runbooks for the systems you own. Operate and tune our WAF: managed and custom rules, rate limiting, and bot mitigation. Requirements 5+ years of hands-on

At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 1 million clients on their path to a brighter future. While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you. Role Overview As our Application Security Engineer, you will be the primary owner and driver of our application security program. You'll work hands-on with engineering teams to embed secure development practices, improve tooling and automation, and guide security considerations for new features, architectures, and services. This is a high-impact role where you'll shape the future of AppSec at a company that values security as a core part of product quality. What You'll Do Application Security Ownership Lead and evolve the company's application security strategy, roadmap, and day-to-day operations. Serve as the primary AppSec partner for numerous dev teams working on Ruby on Rails web apps, React Native mobile apps, and various other projects including Python and Go. Provide security guidance during design, development, and code review for new features and projects. Drive adoption of secure coding practices and threat-modeling across engineering teams. Tooling & Automation Manage and optimize existing AppSec tooling, including: GitHub Advanced Security (SAST, SCA, Secret Scanning) Invicti (DAST) Hadrian (ASM) AppDome (mobile application security) Cloudflare WAF Improve automation and integration of security tools into CI/CD pipelines. Identify and implement additional tools or processes to strengthen the security p

Fanatics Commerce is the global leader in licensed sports merchandise, operating a vertically integrated platform that designs, manufactures, and delivers officially licensed apparel, jerseys, headwear, and collectibles for major leagues, teams, and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital, in-venue, and retail, Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the world's most iconic sports properties. At Fanatics, we bring our BOLD Leadership Principles to life every day - building championship teams, obsessing over fans, acting with entrepreneurial speed, and delivering with a determined and relentless mindset. Fanatics Commerce is the global leader in licensed sports merchandise, operating a vertically integrated platform that designs, manufactures, and delivers officially licensed apparel, jerseys, headwear, and collectibles for major leagues, teams, and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital, in-venue, and retail, Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the world's most iconic sports properties. At Fanatics, we bring our BOLD Leadership Principles to life every day—building championship teams, obsessing over fans, acting with limitless entrepreneurial spirit, and delivering with a determined and relentless mindset. As we continue to scale our global platform, the Senior Security Engineer, Perimeter Security Operations will play a critical role in protecting our global e-commerce and API platform against modern threats at scale. ROLE OVERVIEW The Senior Security Engineer, Perimeter Security Operations is based in Hyderabad, India and is responsible for protecting Fanatics Commerce's global e-commerce and API platform by managing detection, response, tuning, automation, and reliability across CDN, WAF, and networking layers. A d

Curious Minds. Bold Ideas. Extraordinary Impact . We're transforming financial services through bold innovation and relentless execution. You bring the ideas and drive. We'll build what's next — together. As a Senior Platform Engineer in Cloud Infrastructure, you'll help us continue to define infrastructure as code in AWS CDK, operating core services and making the architectural calls that balance scale, reliability, security and cost. You'll partner with application teams to turn what they need into capabilities they can move quickly with, lead proof-of-concepts on new services, and mentor engineers who will learn their craft from you. Your fingerprints will be on how nCino builds for years to come. Responsibilities Design, build, and maintain AWS infrastructure using Infrastructure as Code tools (AWS CDK, or similar), ensuring consistency, repeatability, and version control. Own and operate core AWS services including compute (ECS, Lambda), databases (RDS, DynamoDB), container orchestration (EKS/Kubernetes), and serverless technologies. Own and operate various ingress and edge architectures including, AWS WAF, AWS CloudFront, load balancers, DNS, TLS Certificates at scale. Collaborate directly with application development teams to understand their infrastructure needs and enable them with scalable, reliable platform capabilities. Provide architectural guidance and technical leadership on infrastructure design decisions, considering scalability, reliability, security, and cost-effectiveness. Implement and maintain security best practices across AWS infrastructure, including IAM policies, network security, encryption, and access controls support compliance efforts like SOC2, and PCI. Build and optimize CI/CD pipelines and deployment automation to enable efficient and safe software delivery and familiarity with Gitlab CI and Argo CD is desirable. Monitor, analyze, and optimize cloud costs, identifying opportunities for cost reduction while maintaining performance and

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Roles & Responsibilities Design, deploy, and manage AWS cloud infrastructure and Kubernetes (EKS) environments. Build, maintain, and optimize GitLab CI/CD pipelines for automated deployments. Implement DevSecOps best practices, including infrastructure security, vulnerability management, and compliance controls. Monitor, troubleshoot, and improve platform reliability, performance, and scalability. Deploy and manage cloud-native applications, databases, and supporting services. Collaborate with development teams on architecture, deployment strategies, and production readiness. Drive infrastructure automation using Infrastructure as Code (Terraform). Support incident management, root cause analysis, and operational excellence initiatives. Mandatory Requirements 5+ years of hands-on DevOps/DevSecOps experience in production environments. Strong expertise with AWS services including EKS, EC2, S3, CloudFront, WAF, Lambda, and VPC. Minimum 3+ years of Kubernetes experience, preferably Amazon EKS. Hands-on experience building and managing GitLab CI/CD pipelines. Strong Linux administration and troubleshooting

For more than 30 years, SonicWall has delivered a partner-first unified cybersecurity portfolio that helps SMBs, MSPs, and IT teams consolidate network security, endpoint security, security service edge (SSE), and threat response across hybrid environments. By bringing connected technology, real-time threat intelligence, automation, and expert services together, SonicWall helps organizations simplify security operations, achieve better security outcomes, and lower total cost of ownership. Backed by a global ecosystem of more than 17,000 partners, SonicWall delivers enterprise-grade protection built for SMB and mid-market realities. For more information, visit www.sonicwall.com or follow us on X, LinkedIn , Facebook , and Instagram . Roles & Responsibilities Design, deploy, and manage AWS cloud infrastructure and Kubernetes (EKS) environments. Build, maintain, and optimize GitLab CI/CD pipelines for automated deployments. Implement DevSecOps best practices, including infrastructure security, vulnerability management, and compliance controls. Monitor, troubleshoot, and improve platform reliability, performance, and scalability. Deploy and manage cloud-native applications, databases, and supporting services. Collaborate with development teams on architecture, deployment strategies, and production readiness. Drive infrastructure automation using Infrastructure as Code (Terraform). Support incident management, root cause analysis, and operational excellence initiatives. Mandatory Requirements 6+ years of hands-on DevOps/DevSecOps experience in production environments. Strong expertise with AWS services including EKS, EC2, S3, CloudFront, WAF, Lambda, and VPC. Minimum 3+ years of Kubernetes experience, preferably Amazon EKS. Hands-on experience building and managing GitLab CI/CD pipelines. Strong Linux administration and troubleshooting skills. Experience with Infrastructure as Code using Terraform. Proficiency in Python for automation and scriptin

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the Role: We are looking for a Product Manager to join our Product team. You will own Vercel's networking and CDN product areas. Networking includes the service mesh, Perimeter, VPC connectivity, and Microfrontends. CDN includes the caching layer, traffic security through WAF and DDoS mitigation, domains, and general ingress. You will set direction for how applications and services connect securely, how traffic enters Vercel, and how content is delivered quickly and reliably around the world. You will report to the Product Lead and will be located in San Francisco, CA (hybrid). If you’re based within a pre-determined commuting distance of one of our offices (SF, NY, London, or Berlin), the role includes in-office anchor days on Monday, Tuesday, and Friday. If you're located beyond that distance, the role is fully remote. For location-specific details, please connect with our recruiting team. What You Will Do: Own the product vision, strategy, and multi-year roadmap across Vercel's Networking and CDN product areas Evolve existing Networking and CDN products (Service mesh, Perimeters, Ingress, caching layer, Traffic security, WAF, DDoS mitigation, Domains) by defining new features and designing new product surfaces. Define pricing for new products or features. Partner with Engineering on the performance and reliability. Work directly with Enterprise customers and the field on connectivity, networking, performance, and security requirements that block adoption or scale About You: You've built and shipped networking, CDN infrastructure, service

The Role As a Senior Application Security Engineer, you will provide hands-on technical delivery for the migration of Web Application Firewall (WAF) capabilities to Cloudflare and/or Akamai. You will work closely with architecture, security, network, and application teams to execute migration waves, onboard applications, implement security policies, and support successful cutovers. You will play a key role in validating functionality, security, and performance, resolving technical issues, and supporting post-migration stabilization across complex enterprise environments. What You’ll Do Deliver end-to-end WAF migrations to Cloudflare and/or Akamai, including configuration, application onboarding, and deployment. Implement and tune WAF security policies, rules, and controls in line with application and security requirements. Execute DNS and traffic-routing changes and support integrations required for successful application migration. Perform testing, troubleshooting, and validation to confirm functionality, security, and performance throughout migration waves. Partner with architecture, security, network, and application teams to support cutover activities, resolve technical issues, and stabilize services following migration. What We’re Looking For 10+ years of relevant experience in network security, application security, infrastructure engineering, or related technical roles, with substantial hands-on WAF experience. Strong hands-on experience configuring, migrating, and supporting enterprise WAF technologies, ideally Cloudflare and/or Akamai. Practical knowledge of DNS, HTTP/HTTPS, TLS, traffic routing, application delivery, and web security concepts. Experience implementing and tuning WAF policies and security rules, troubleshooting application traffic, and resolving migration or production issues. Demonstrated experience working collaboratively with architecture, security, network, and application teams to deliver complex technical changes. Bonus Points For Expe

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale with trillions of data points per day, enabling seamless collaboration and problem-solving among Dev, Ops, and Security teams for tens of thousands of companies globally. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Team The Datadog Security Libraries team owns the customer-side integrations behind our run-time security products App & API Protection , Workload Protection , and Code Security . Our libraries let customers automatically manage application security risk with continuous, real-time monitoring of vulnerabilities and threats against their web applications, serverless applications, and APIs, in production. Automatically integrated with Application Performance Monitoring (APM) distributed tracing and code-level context, our software empowers development, operations, and security teams to build and run secure applications. As a polyglot team we ship and maintain the security capabilities of Datadog's tracing libraries across .NET , Java , Go , Node.js , Python , Ruby , and PHP , on top of a shared C++ core and a set of HTTP proxy integrations (primarily Envoy, NGINX, and HAProxy). Our code runs inside thousands of production applications around the world. Recent work spans exploit prevention (RASP) and WAF detections, API Security, code security (IAST and SCA), and AI-assisted ("agentic") onboarding, always measured by real product outcomes and operational telemetry. The Opportunity We're looking for a senior, polyglot engineer to contribute across several of our security libraries, with .NET or Java expertise. You'll design and build security integrations and detection features, take them from prototype to production-hardened, and own them operationally as they instrument thousands of applications. As a se

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale with trillions of data points per day, enabling seamless collaboration and problem-solving among Dev, Ops, and Security teams for tens of thousands of companies globally. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Team The Datadog Security Libraries team owns the customer-side integrations behind our run-time security products App & API Protection , Workload Protection , and Code Security . Our libraries let customers automatically manage application security risk with continuous, real-time monitoring of vulnerabilities and threats against their web applications, serverless applications, and APIs, in production. Automatically integrated with Application Performance Monitoring (APM) distributed tracing and code-level context, our software empowers development, operations, and security teams to build and run secure applications. As a polyglot team we ship and maintain the security capabilities of Datadog's tracing libraries across .NET , Java , Go , Node.js , Python , Ruby , and PHP , on top of a shared C++ core and a set of HTTP proxy integrations (primarily Envoy, NGINX, and HAProxy). Our code runs inside thousands of production applications around the world. Recent work spans exploit prevention (RASP) and WAF detections, API Security, code security (IAST and SCA), and AI-assisted ("agentic") onboarding, always measured by real product outcomes and operational telemetry. The Opportunity We're looking for a senior, polyglot engineer to contribute across several of our security libraries, with .NET or Java expertise. You'll design and build security integrations and detection features, take them from prototype to production-hardened, and own them operationally as they instrument thousands of applications. As a se

About Us: Paytm is India's leading mobile payments and financial services distribution company. Pioneer of the mobile QR payments revolution in India, Paytm builds technologies that help small businesses with payments and commerce. Paytm’s mission is to serve half a billion Indians and bring them to the mainstream economy with the help of technology. Job Summary: We are seeking a highly motivated and skilled Akamai CDN & WAF Engineer with 2-5 years of hands-on experience in configuring, deploying, and managing Akamai's Content Delivery Network (CDN) and Web Application Firewall (WAF) solutions. The ideal candidate will possess a strong understanding of web performance optimization, security best practices, and have a proven track record of implementing and troubleshooting Akamai services in a production environment. This role requires a proactive individual with excellent problem-solving skills and the ability to collaborate effectively with cross-functional teams. Responsibilities: Configuration and Deployment: Configure and deploy Akamai CDN services (e.g., Domain onboarding, delivery rules, caching policies, origin configurations) and WAF rulesets (e.g., security policies, custom rules, DOS and client reputation) based on application requirements and security guidelines. Production Support: Provide day-to-day operational support for Akamai CDN and WAF infrastructure, including monitoring performance, identifying and resolving issues, and implementing necessary changes. Performance Optimization: Analyze website performance metrics and implement Akamai CDN features and configurations to optimize website speed, reduce latency, and improve user experience. Security Implementation: Implement and manage Akamai WAF policies to protect web applications from various security threats, including OWASP Top 10 vulnerabilities, bot attacks, and DDoS attacks. Rule Management: Create, review, and maintain custom WAF rules and exceptions based on application-specific ne

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Security Engineer – Akamai & Edge Security Services designs, implements, administers, and optimizes security controls that protect enterprise web applications, APIs, and internet-facing services. This role provides senior technical expertise in Web Application Firewall (WAF), bot protection, DDoS mitigation, API security, DNS security, certificate management, and related edge security technologies. The position partners with application, cloud, infrastructure, network, and security teams to strengthen the enterprise digital perimeter, respond to security threats, troubleshoot complex issues, and continuously improve security controls and operational processes. The role participates in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes. Key Responsibilities: Security Engineering & Administration Administer and optimize Akamai security tec

The Security Libraries team owns the customer-side integrations behind Datadog’s run-time security products — App & API Protection , Workload Protection , and Code Security — shipping and maintaining security capabilities across seven open-source language libraries ( .NET , Java , Go , Node.js , Python , Ruby , PHP ) and a set of HTTP proxy integrations (Envoy, NGINX, and HAProxy), running inside thousands of production clusters worldwide. Recent work spans exploit prevention (RASP), WAF detections, API Security, code security (IAST and SCA), and AI-assisted onboarding. As Engineering Manager, you’ll lead part of this polyglot team, setting the technical bar and team culture while driving the pace at which new detections and AI-assisted capabilities reach customers. This is a hands-on role: you’ll balance people leadership, product and roadmap ownership, and the operational health of code that runs in production at massive scale, with room to grow into more of Datadog’s security portfolio over time. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead, grow, and develop a team of roughly 4-8 library engineers — coaching, giving direct feedback, and empowering senior ICs as technical leaders Own team delivery and productivity: planning, milestones, reviews, and the on-call rotation Set product direction with Product Management and balance priorities across App & API Protection, Workload Protection, and Code Security Stay technically close to the work — apply strong technical judgment, contribute code where it matters most, and keep quality and architecture high Build strong relationships and drive alignment across the language teams and product, backend, and frontend partners Shape team identity and culture, and own accountability when problems oc