Network Security Engineer

Worldpay, LLC; Cincinnati (OH); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Worldpay is seeking a Network Security Engineer to operate and enhance our WAF, edge security, and application protection platforms in a global enterprise environment.

The role is hands-on with ~80% focused on implementation, configuration, tuning, and operational improvement, and ~20% on incident mitigation and response. Hybrid work model with three days in Cincinnati, OH.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, networking, or a related field—or equivalent practical experience.

Responsibilities

• Support operation and continuous improvement of WAF and edge security platforms, focusing on application, API, and bot protection.

Skills

Problem-solving

Communication

Team collaboration

Incident response

Analytical thinking

WAF edge security

Education

Bachelor’s degree in cybersecurity, CS, IT, networking or related field

Tools

Akamai

Cloudflare

WAF/CDN platforms

Terraform

Python

REST APIs

Git

CI/CD tooling

SIEM

Job description

This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or Green Card Holder This position is hybrid 3 days per week in our Cincinnati, OH.

Ready to take your career global? Make your mark at one of the biggest names in payments. We’re looking for a Network Security Engineer to join our ever-evolving Edge & Network Security team and help us unleash the potential of every business.

In this role, you’ll help operate, strengthen, and continuously improve our web application firewall, edge security, and application protection platforms across a global enterprise environment. This is a hands‑on engineering role focused primarily on web application firewalls, edge security, application‑layer controls, bot mitigation, API protection, and traffic inspection. Our core platforms include Akamai and Cloudflare technologies, including WAF policies, managed and custom rules, bot protection, rate limiting, API security, security analytics, and edge traffic protection.

You’ll support business‑critical applications and services while working with experienced engineers and partner teams. You’ll help onboard applications, implement and tune security controls, investigate false positives, troubleshoot application access issues, and improve the reliability and effectiveness of our security services. This is an engineering‑first role, with approximately 80% of the time focused on implementation, configuration, tuning, troubleshooting, and operational improvement, and approximately 20% supporting incident mitigation and response.

On‑Call Expectations

Participate in a rotating on‑call schedule for incidents affecting WAF, edge security, application protection, or related network security services. You’ll perform initial investigation and mitigation, engage senior engineers and other support teams when needed, and contribute to post‑incident reviews and corrective actions. You’ll also participate in readiness exercises, operational reviews, and resilience improvements for critical edge and application security services.

On‑Call Schedule

Weekdays: 10 am – 10 pm ET (rotates between 4 colleagues)

Weekends: 10 pm Friday – 10 pm Sunday ET (rotates between 7 colleagues)

What you’ll own

• Support the operation and continuous improvement of WAF and edge security platforms, with a focus on application, API, and bot protection.
• Configure and tune Akamai, Cloudflare, or similar platforms, including WAF policies, managed and custom rules, rate limiting, bot controls, and security analytics.
• Onboard internet‑facing applications and implement appropriate protections, exceptions, and allow/block controls.
• Analyze traffic, logs, and security events to identify threats, configuration issues, false positives, and policy improvement opportunities.
• Troubleshoot WAF blocks, application access, TLS/certificate, DNS, proxy, and other edge security issues.
• Implement and validate changes using established testing, peer‑review, rollback, and change‑management processes.
• Support incident response, maintain operational documentation and runbooks, and collaborate with application, security, network, infrastructure, and vendor teams.

What you’ll bring

• Bachelor’s degree in cybersecurity, computer science, information technology, networking, or a related field—or equivalent practical experience.
• 3–5 years of experience in network security, application security, edge security, security operations, infrastructure engineering, or a related role.
• Hands‑on experience supporting WAF or application protection technologies, preferably Akamai, Cloudflare, or a comparable WAF/CDN platform.
• Experience with application onboarding, policy implementation, traffic analysis, rule tuning, exception handling, troubleshooting, and false‑positive reduction.
• Working knowledge of TCP/IP, HTTP/S, TLS and certificates, DNS, proxies, load balancing, NAT, routing, and CDN or edge security concepts.
• Ability to analyze logs, HTTP transactions, application behavior, and security events to investigate and resolve technical issues.
• Strong problem‑solving and communication skills, with the ability to work across distributed teams, follow change‑management processes, and participate in a rotating on‑call schedule.
• It’s a bonus if you have Experience with Akamai or Cloudflare application, API, or bot protection capabilities.
• Familiarity with Terraform, Python, REST APIs, Git, CI/CD pipelines, or other security automation tools.
• Experience with SIEM platforms, dashboards, alerts, or reporting for WAF and edge security events.
• Familiarity with the OWASP Top10, API abuse, credential attacks, automated threats, or application‑layer denial‑of‑service patterns.
• Exposure to SASE, secure web gateways, Zscaler, Prisma Access, Palo Alto, F5 Distributed Cloud, DDoS protection, or load‑balancing technologies.
• Experience in a regulated or highly available enterprise environment, or a relevant certification such as Security+, CCNA, Akamai, Cloudflare, GIAC, Palo Alto, or Zscaler.

About the team

Our inclusive and global teams win together every day. We’re proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections–it’s unmatched. Come and be part of an ever‑evolving company and get dynamic opportunities that go beyond borders. What makes a Globalpayer? Globalpayers think like a client, act like an owner and win as one team. We’re curious and innovative–always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do.

EEOC Statement

Worldpay is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here. If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test.

In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.

Global Payments and Worldpay recently joined forces, and we're currently operating across two Workday application systems. If you don't see one of your applications here, it may have been submitted in the Global Payments Workday system instead.

Worldpay is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how Worldpay protects personal information online, please see the Online Privacy Notice.

Recruitment at Worldpay works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. Worldpay does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass