Lead Information Security Engineer – Web Application Security

Jobtailor; Arizona; On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor in the United States (Arizona) is seeking an experienced Information Security Engineer to provide audit and control support for inbound web application security technologies and improve security processes. You will design, document, test, and implement complex security solutions, and advise on risk management and incident response for large internal projects.

Ideal candidates will have 5+ years in InfoSec engineering in enterprise settings, strong Layer 7 security expertise, and

Qualifications

• 5+ years of Information Security Engineering experience in an enterprise environment.
• Layer 7 web security experience including Bot, API, L7 DDoS, and WAF.
• Advanced knowledge of HTTP/S.
• Familiarity with DNS and load balancing.
• Technical documentation experience.
• Jira and Confluence experience.
• Strategic planning experience translating leadership vision into executable strategies and initiatives.
• Technology experience in the financial services sector.

Responsibilities

• Provide audit and control support for inbound web application security technologies.
• Improve security processes and create engineering documentation.
• Support engagements and application IDs.
• Create, review, and approve changes.
• Provide security consulting on large projects for internal clients.
• Design, document, test, maintain, and provide issue-resolution recommendations for complex security solutions.
• Review and correlate security logs.
• Implement information security components including risk management, threat identification, monitoring, incident response, access management, and business continuity.
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives.
• Collaborate with and influence professionals at all levels, including managers.
• Support change activities during off hours and occasional weekends.

Job description

• Provide audit and control support for inbound web application security technologies
• Improve security processes and create engineering documentation
• Support engagements and application IDs
• Create, review, and approve changes
• Provide security consulting on large projects for internal clients
• Design, document, test, maintain, and provide issue-resolution recommendations for complex security solutions
• Review and correlate security logs
• Implement information security components including risk management, threat identification, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate with and influence professionals at all levels, including managers
• Support change activities during off hours and occasional weekends

Requirements

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through work experience, training, military experience, or education
• 5+ years of experience in an enterprise environment
• Layer 7 web security experience, including Bot, API, L7 DDoS, and WAF
• Advanced knowledge of HTTP/S
• ServiceNow experience
• Experience with Akamai and/or Cloudflare
• Content delivery network experience
• Familiarity with DNS and load balancing
• Technical documentation experience
• Jira and Confluence experience
• Strategic planning experience translating leadership vision into executable strategies and initiatives
• Technology experience in the financial services sector
• Ability to coordinate multiple tasks and meet aggressive time frames
• Advanced critical thinking, problem-solving, and technical troubleshooting abilities
• Strong analytical skills with high attention to detail and accuracy
• Ability to thrive in a complex, fast-paced technology and/or information security organization within a large enterprise environment
• Ability to work off hours and occasional weekends to support change activities
• This position is not eligible for Visa sponsorship

Core Competencies

Demonstrates extensive experience in Information Security Engineering, with a focus on Layer 7 web security technologies and risk management. Proven ability to design, implement, and document complex security solutions while collaborating effectively across all organizational levels.

Highest-signal resume keywords

• Information Security Engineering
• Layer 7 Web Security
• Risk Management
• ServiceNow
• Akamai

ATS Optimization Keywords

Hard Skills

• Risk Assessment
• Threat Identification
• Incident Response
• Technical Documentation
• Security Log Review
• Change Management
• Problem-Solving
• Analytical Skills
• Technical Troubleshooting
• Attention to Detail

Soft Skills

• Collaboration
• Critical Thinking
• Ability to Coordinate Multiple Tasks
• Ability to Thrive in Fast-Paced Environments

Industry Keywords

• Financial Services
• Web Application Security
• Business Continuity
• Security Consulting
• DDoS Protection

Tools & Technologies

• ServiceNow
• Jira
• Confluence
• Akamai
• Cloudflare
• Content Delivery Network
• DNS
• Load Balancing