Cloud Security Consultant: WAF & AppSec Expert

Ethereum Technologies; New York (NY); On-site; USD 94,000 - 127,000; Full time

Job summary

Ethereum Technologies is seeking a .NET API Developer in Boca Raton, FL, for a 12-month plus extension engagement. The role focuses on securing cloud-based APIs with Cloudflare and Akamai tooling, strong OWASP knowledge, and SDLC security practices.

The candidate will analyze HTTP traffic, perform vulnerability assessments, and contribute to DevSecOps initiatives while working under W-2/1099/C2C arrangements.

Qualifications

• 5+ years of hands-on experience with Cloudflare WAF.
• Experience with Cloudflare Rulesets, Bot Management, DNS, DDoS Protection, and Logpush.
• Hands-on experience with Akamai WAF, Property Manager, Bot Manager, and Edge DNS.
• Strong knowledge of OWASP Top 10 and application security principles.
• 5+ years of experience with SAST, DAST, and SCA security tools.
• Hands-on experience with Checkmarx, Burp Suite, and Fortify.
• Ability to analyze HTTP traffic and identify application security vulnerabilities.
• Strong understanding of XSS, SQL Injection, RCE, CSRF, and SSRF.
• Knowledge of AWS, Azure, and cloud-hosted applications.
• Experience with SIEM/SOAR platforms and security monitoring dashboards.
• Experience implementing secure SDLC practices.
• Strong understanding of DevSecOps processes and application security.
• Experience conducting security assessments and secure architecture reviews.

Skills

Cloudflare WAF

Cloudflare Rulesets

Bot Management

DNS

DDoS Protection

Logpush

OWASP Top 10

Application security

SAST

DAST

SCA

Checkmarx

Burp Suite

Fortify

HTTP traffic analysis

XSS

SQL Injection

RCE

CSRF

SSRF

AWS

Azure

SIEM

SOAR

Security monitoring dashboards

Secure SDLC

DevSecOps

Security assessments

Architecture reviews

Tools

Akamai WAF

Property Manager

Bot Manager

Edge DNS

Job description

Ethereum Technologies is seeking a .NET API Developer in Boca Raton, FL, for a 12-month plus extension engagement. The role focuses on securing cloud-based APIs with Cloudflare and Akamai tooling, strong OWASP knowledge, and SDLC security practices.

The candidate will analyze HTTP traffic, perform vulnerability assessments, and contribute to DevSecOps initiatives while working under W-2/1099/C2C arrangements.