Remote Web Application Firewall Engineer — Secure SDLC

Lightolog; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health, Dental, Vision

401(k) Plan

Paid Holidays

Life Insurance

Disability Insurance

Job summary

Lightology is seeking an experienced Web Application Firewall Engineer to secure our web assets by integrating security into the SDLC and protecting enterprise applications from evolving threats.

The role focuses on vulnerability assessments, threat modeling, and implementing secure coding practices in CI/CD environments, with hands-on work on Barracuda WAF and related controls. Remote work arrangement is available for this position.

Qualifications

• Experience in Application Security (AppSec) and Web Application Security.
• Strong knowledge of secure software development practices and Secure SDLC.
• Experience performing vulnerability assessments, threat modeling, and application security testing.
• Knowledge of OWASP Top 10 and common web vulnerabilities and remediation techniques.
• Experience implementing or supporting Web Application Firewalls (WAF).
• Experience integrating security into CI/CD pipelines and DevSecOps environments.

Responsibilities

• Embed security throughout the Software Development Lifecycle (SDLC).
• Perform web application vulnerability assessments, penetration support, and threat modeling activities.
• Identify, prioritize, and remediate application security vulnerabilities.
• Implement secure coding standards aligned with OWASP Top 10 and industry best practices.
• Configure and maintain Web Application Firewalls (WAF) and application security controls, particularly Barracuda WAF.
• Monitor application logs and investigate security events affecting web applications and APIs.
• Collaborate with software developers and DevOps to improve security posture.
• Develop security documentation, technical recommendations, and remediation guidance.

Skills

Application Security

Secure SDLC

Threat Modeling

Vulnerability Assessments

DevSecOps

WAF Knowledge

Tools

Barracuda WAF

CI/CD Tooling

Job description

Lightology is seeking an experienced Web Application Firewall Engineer to secure our web assets by integrating security into the SDLC and protecting enterprise applications from evolving threats.

The role focuses on vulnerability assessments, threat modeling, and implementing secure coding practices in CI/CD environments, with hands-on work on Barracuda WAF and related controls. Remote work arrangement is available for this position.