Remote Security Engineer: WAF & API Defense

Hampton North; United States; On-site; USD 190,000 - 210,000; Full time

Job summary

Hampton North seeks a security-focused software engineer to own Layer 7 defense for a cloud-native fintech environment across AWS and GCP. You will design, tune, and automate WAF, API security, and bot protection for customer-facing apps, while shaping the cloud network fabric and zero-trust initiatives.

Ideal candidates have 7+ years of hands-on security experience, deep WAF expertise, strong Python skills, and familiarity with Kubernetes networking.

Qualifications

• Computer science background or equivalent software engineering foundation; you build and automate, you don't just configure.
• 7+ years in application, cloud, or product security with strong hands-on Layer 7 experience.
• Deep WAF experience at scale (AWS WAF, Cloudflare, Akamai, Imperva, or comparable) plus API security.
• Bot mitigation and protection against OWASP Top 10, DDoS, credential stuffing, and API abuse.
• Hands-on AWS depth, working knowledge of GCP, and comfort with CloudFront, ALB, API Gateway, and Web ACLs.
• Strong scripting and automation in Python.
• Cloud network fundamentals: VPC design, segmentation, route tables, and security groups.
• Terraform and a policy-as-code approach.
• Fintech, SaaS, or cloud-native background preferred.
• Exposure to ZTNA or Zscaler and modern segmentation is a plus.
• Familiarity with Kubernetes networking and service mesh is a plus.

Responsibilities

• Own Layer 7 defense across the application edge: WAF, API security, bot management, and rate limiting against OWASP Top 10 and API abuse.
• Design and tune WAF rule sets and Web ACLs across CloudFront, ALB, and API Gateway.
• Build API security controls at the gateway: schema validation, authentication, throttling, and abuse detection.
• Run bot mitigation and defend against DDoS, credential stuffing, and aggregator abuse.
• Correlate WAF, bot, and load balancer telemetry for detection, and write automation behind response in Python.
• Secure the cloud network fabric: VPC design, segmentation, route tables, and security groups across AWS and GCP.
• Codify controls as policy-as-code in Terraform.
• Contribute to the zero trust rollout and Kubernetes networking security as the environment scales.
• Own initiatives from design through delivery and partner with platform and product teams.

Skills

WAF expertise

API security

Bot mitigation

Python scripting

AWS depth

GCP knowledge

Security engineering

Networking fundamentals

Kubernetes networking

Education

Computer science background

Tools

AWS WAF

CloudFront

ALB

API Gateway

Web ACLs

Terraform

Policy-as-code

Job description

Hampton North seeks a security-focused software engineer to own Layer 7 defense for a cloud-native fintech environment across AWS and GCP. You will design, tune, and automate WAF, API security, and bot protection for customer-facing apps, while shaping the cloud network fabric and zero-trust initiatives.

Ideal candidates have 7+ years of hands-on security experience, deep WAF expertise, strong Python skills, and familiarity with Kubernetes networking.