Remote Senior WAF Architect: Autonomous Defense Strategy

horizon3ai; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Fully remote

Health insurance

Vision & dental

Flexible vacation

Parental leave

Equity / Stock options

Job summary

horizon3ai is seeking a security domain expert to define WAF detection and remediation strategies across vendor platforms. This non-coding role focuses on technical judgment and turning blue-team workflows into clear requirements for product, engineering, and AI research.

You will translate needs into prioritized requirements, set acceptance criteria, and guide policy tuning. The role is fully remote in the United States, with health/dental/vision benefits, flexible vacations, parental leave,

Qualifications

• At least five years in application security, security engineering, or incident response.
• Deep hands-on understanding of WAF configuration across major platforms.
• Ability to map blue-team workflows to practical requirements.
• Strong judgment on exploit coverage and impact on legitimate traffic.

Responsibilities

• Translate security operations needs into prioritized, buildable requirements with Product.
• Set acceptance criteria for detection and tuning features, then assess releases against those criteria.
• Advise Engineering and AI research on firewall behavior, attack techniques, and vendor-specific rule semantics.
• Maintain practical coverage knowledge of major WAF products, including their policy configuration, rule evaluation, logging, and APIs.
• Keep guidance current as platforms change their rules, APIs, managed protections, and bot or API security capabilities.
• Evaluate whether recommended changes stop validated exploit variations while preserving legitimate application traffic, working with attack validation specialists.

Skills

Application security

WAF configuration

Vendor platforms

Security operations

Job description

horizon3ai is seeking a security domain expert to define WAF detection and remediation strategies across vendor platforms. This non-coding role focuses on technical judgment and turning blue-team workflows into clear requirements for product, engineering, and AI research.

You will translate needs into prioritized requirements, set acceptance criteria, and guide policy tuning. The role is fully remote in the United States, with health/dental/vision benefits, flexible vacations, parental leave,