Application Security Resident Engineer

Barqsystems; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Barqsystems is seeking a Resident Application Security Engineer with banking operations experience to lead our WAF strategy. You will migrate applications to FortiWeb, configure FortiWeb with FortiADC, and integrate FortiSandbox for payload inspection.

The role requires 2–3+ years of FortiWeb/FortiADC experience, strong knowledge of web app security, SSL/TLS, and OWASP Top 10, with Fortinet certifications considered a plus.

Qualifications

• Bachelor’s degree in CS, Network Engineering, Cybersecurity, or related field
• 2–3+ years of FortiWeb/FortiADC experience
• Strong hands-on FortiWeb deployment, migration, and troubleshooting
• Experience migrating applications and security policies from another WAF platform
• Strong knowledge of web application security, APIs, SSL/TLS, HTTP/HTTPS, and OWASP Top 10
• Fortinet certifications are a plus

Responsibilities

• Assess existing WAF architecture, policies, and coverage.
• Migrate applications and APIs to FortiWeb.
• Configure and deploy FortiWeb platform; tune policies.
• Integrate FortiWeb with FortiSandbox for payload/file inspection.
• Coordinate with application owners and cybersecurity teams.
• Prepare cutover, rollback procedures, and maintenance windows.
• Provide post-migration support and operational monitoring.

Skills

FortiWeb deployment

FortiADC deployment

FortiSandbox integration

Web application security

SSL/TLS

OWASP Top 10

Migration planning

Cross-team coordination

Education

Bachelor’s degree in CS/Network/Csecurity

Tools

FortiWeb, FortiADC, FortiSandbox

Job description

We are hiring a Resident Application Security Engineer with mandatory banking operations experience to lead our WAF strategy. You will assess environments, execute migrations to FortiWEB, and fine-tune policies using FortiADC and FortiSandbox. Requires 2-3+ years of experience in FortiWeb/FortiADC, strong knowledge of web application security, SSL/TLS, and OWASP Top 10. Fortinet certifications are a plus.

Opening Date: 8/30/2026 | Closing Date: 9/20/2026

Category: Technical

Location : Riyadh, KSA

Job Purpose

• Involve in the migration of applications and APIs to FortiWEB.
• Involve in the implementation of FortiWEB solution and applications migration.
• Support application security enhancement, WAF optimization, and application onboarding.
• Provide FortiADC expertise for application delivery and load-balancing requirements when required.
• Involve in FortiSandbox implementation and integration for payload and file inspection.
• Coordinate with application owners, network teams, cybersecurity teams, and infrastructure teams.
• Operate day-to-day tasks for the WAF solution.

Job Description

• Assess the existing WAF architecture, policies, application coverage, traffic, capacity, and integrations.
• Identify security, performance, scalability, resiliency, and availability gaps.
• Participate in design workshops and prepare HLD, LLD, migration plans, runbooks, and functional test plans.
• Deploy and configure the FortiWeb platform.
• Migrate applications and APIs to FortiWeb.
• Convert existing WAF policies to FortiWeb best-practice equivalent policies.
• Install and bind SSL certificates.
• Configure security profiles for existing and newly onboarded applications.
• Implement payload validation, multi-file inspection, threat detection, and advanced attack protection.
• Integrate FortiWeb with FortiSandbox for payload and file inspection.
• Prepare application cutover and rollback procedures.
• Execute application migrations during approved maintenance windows.
• Coordinate application testing and validation with application owners.
• Tune WAF policies to improve protection, performance, and reduce false positives.
• Validate throughput, bandwidth handling, concurrent connections, and application availability.
• Troubleshoot WAF, SSL, application publishing, security-policy, and performance issues.
• Provide post-migration support and operational monitoring.
• Maintain application migration records, implementation documents, test results, and validation reports.
• Deliver knowledge-transfer sessions to the customer’s technical teams.
• Operate day-to-day tasks for the WAF solution.

Job Qualifications

• Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related field.
• 2 or 3+ years of experience.
• Strong hands-on experience with FortiWeb deployment, migration, administration, and troubleshooting.
• Strong hands-on experience with FortiADC deployment and application load balancing.
• FortiSandbox experience is a huge advantage.
• Experience migrating applications and security policies from another WAF platform.
• Strong knowledge of web application security, APIs, SSL/TLS, HTTP/HTTPS, and OWASP Top 10.
• Experience with WAF policy tuning, application onboarding, payload validation, and file inspection.
• Strong knowledge of networking and cybersecurity principles.
• Experience preparing HLD, LLD, migration plans, test plans, and implementation documents.
• Relevant Fortinet certifications are preferred.
• Good communication, documentation, and troubleshooting skills.
• Experience in monitoring and operating day-to-day tasks in WAF and Load Balancing solutions