WAF & FortiWeb Engineer - App Security

Barqsystems; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

Barqsystems is seeking a Resident Application Security Engineer with banking operations experience to lead our WAF strategy. You will migrate applications to FortiWeb, configure FortiWeb with FortiADC, and integrate FortiSandbox for payload inspection.

The role requires 2–3+ years of FortiWeb/FortiADC experience, strong knowledge of web app security, SSL/TLS, and OWASP Top 10, with Fortinet certifications considered a plus.

Qualifications

• Bachelor’s degree in CS, Network Engineering, Cybersecurity, or related field
• 2–3+ years of FortiWeb/FortiADC experience
• Strong hands-on FortiWeb deployment, migration, and troubleshooting
• Experience migrating applications and security policies from another WAF platform
• Strong knowledge of web application security, APIs, SSL/TLS, HTTP/HTTPS, and OWASP Top 10
• Fortinet certifications are a plus

Responsibilities

• Assess existing WAF architecture, policies, and coverage.
• Migrate applications and APIs to FortiWeb.
• Configure and deploy FortiWeb platform; tune policies.
• Integrate FortiWeb with FortiSandbox for payload/file inspection.
• Coordinate with application owners and cybersecurity teams.
• Prepare cutover, rollback procedures, and maintenance windows.
• Provide post-migration support and operational monitoring.

Skills

FortiWeb deployment

FortiADC deployment

FortiSandbox integration

Web application security

SSL/TLS

OWASP Top 10

Migration planning

Cross-team coordination

Education

Bachelor’s degree in CS/Network/Csecurity

Tools

FortiWeb, FortiADC, FortiSandbox

Job description

Barqsystems is seeking a Resident Application Security Engineer with banking operations experience to lead our WAF strategy. You will migrate applications to FortiWeb, configure FortiWeb with FortiADC, and integrate FortiSandbox for payload inspection.

The role requires 2–3+ years of FortiWeb/FortiADC experience, strong knowledge of web app security, SSL/TLS, and OWASP Top 10, with Fortinet certifications considered a plus.