Senior Cybersecurity Engineer

Rogue Fitness; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Rogue Fitness seeks a hands-on Senior Cybersecurity Engineer to tune and operate web application firewalls, cloud security controls, SIEM investigations, and endpoint incidents. You will move daily between WAF tuning, cloud security, and threat hunting, ensuring robust defense and rapid remediation.

Based in Columbus, OH, this onsite position requires practical experience with security operations and enterprise protections.

Qualifications

• Hands-on experience administering a web application firewall (e.g., Cloudflare or similar enterprise platform)
• Strong understanding of web security fundamentals: HTTP/HTTPS, DNS, TLS, APIs, OWASP risks
• Experience implementing security controls in GCP, Azure, or another public cloud
• Experience with EDR/XDR platforms (e.g., CrowdStrike) and SIEM/SOAR tools
• Experience with vulnerability management, pentesting, threat hunting, and IR
• Working knowledge of Linux and Windows administration, networking, firewalls, and zero trust/hybrid infra
• Experience supporting PCI DSS, GDPR, or similar compliance and privacy frameworks
• Strong communicator who can work independently and partner with stakeholders

Responsibilities

• Administer and improve WAF platforms; investigate blocked requests, attacks, and false positives
• Implement and maintain security controls across cloud platforms; remediate misconfigurations and excessive permissions
• Support application security and DevSecOps across lifecycle; risk review of APIs, SaaS, and AI apps
• Manage EDR (CrowdStrike) and anti-ransomware protections; operate SIEM/SOAR; build alerts and detections
• Lead incident investigation, containment, remediation, and recovery; maintain IR playbooks; threat intel management
• Run automated penetration testing and attack path analysis; drive remediation across apps, cloud, and infra
• Administer Zscaler; co-manage VMware and Linux servers; monitor via Zabbix
• Maintain PCI DSS, GDPR compliance; support audit prep and evidence gathering; run security awareness training
• Administer Google Workspace identity; MFA, least privilege, investigate suspicious sign-ins

Skills

WAF management

Cloud security

SIEM/SOAR

Threat hunting

Incident response

Linux/Windows

PCI/GDPR compliance

Zero trust

Tools

Cloudflare

CrowdStrike

Halcyon

Google SecOps

NodeZero

Recorded Future

Zscaler

Zabbix

KnowBe4

VMware

Job description

Responsibilities

• Administer and improve WAF platforms — managed/custom rules, rate limiting, bot and API protections, and DDoS controls; investigate blocked requests, attacks, and false positives
• Implement and maintain security controls across GCP, Azure, and other cloud platforms, including identity, network, storage, and logging configurations; identify and remediate misconfigurations and excessive permissions
• Support application security and DevSecOps practices across the development and deployment lifecycle, including risk review of APIs, SaaS, and AI-enabled applications
• Manage EDR (CrowdStrike) and anti-ransomware (Halcyon) protections; operate SIEM/SOAR (Google SecOps), building alerts, detections, dashboards, and response automation
• Lead incident investigation, containment, remediation, and recovery; maintain IR playbooks; perform threat hunting, forensics, and root cause analysis; manage threat intel via Recorded Future
• Run automated penetration testing and attack path analysis (NodeZero); validate findings and drive remediation across web apps, APIs, cloud, and internal/external infrastructure
• Administer Zscaler in support of the zero trust model; configure and troubleshoot firewalls, segmentation, VPN, and remote access; co-manage VMware and Linux server environments; monitor via Zabbix
• Maintain compliance with PCI DSS, GDPR, and related frameworks; support audit prep and evidence gathering; own the Risk Register; translate compliance requirements into technical controls; run security awareness training via KnowBe4
• Administer and secure Google Workspace identity — MFA, access controls, account lifecycle, least privilege — and investigate suspicious sign-ins and identity-related alerts

Qualifications

• Hands-on experience administering a web application firewall (e.g., Cloudflare or similar enterprise platform)
• Strong understanding of web security fundamentals: HTTP/HTTPS, DNS, TLS, APIs, OWASP risks, bot activity, rate limiting, and DDoS
• Experience implementing security controls in GCP, Azure, or another public cloud, including identity, network, storage, and logging
• Experience with EDR/XDR platforms (e.g., CrowdStrike) and operating SIEM/SOAR tools for security investigations
• Experience with vulnerability management, penetration testing, threat hunting, and incident response
• Working knowledge of Linux and Windows administration, networking, firewalls, and zero trust/hybrid infrastructure
• Experience supporting PCI DSS, GDPR, or similar compliance and privacy frameworks
• Strong communicator who can work independently and partner effectively with technical and business stakeholders

Preferred

• Direct experience with Cloudflare, CrowdStrike, Halcyon, Google SecOps, NodeZero, Recorded Future, Zscaler, Zabbix, KnowBe4, or VMware
• Python or other scripting experience for security automation, detections, and SIEM workflow development
• Background in ethical hacking, application security, digital forensics, or OSINT
• Familiarity with DevSecOps, IaC, containers, and cloud-native services
• Awareness of AI security risks and secure use of generative AI
• Security or cloud certifications are a plus but not required

Applicants must be authorized to work in the United States for any employer.

Senior Cybersecurity Engineer is a fully onsite role in Columbus, Ohio. Remote work is not available.

We're looking for a hands-on Senior Cybersecurity Engineer with strong experience in web application firewalls, cloud security, security operations, and infrastructure security. This is an implementation and operations role, not a pure architecture or policy position — you'll configure, troubleshoot, and run security systems daily, moving fluidly between WAF tuning, cloud controls, SIEM investigations, endpoint incidents, and network troubleshooting.

Rogue Fitness is the leading manufacturer of strength and conditioning equipment, including barbells, power racks, sleds, and accessories. Founded in a garage in 2006, the company has grown to over 1400 team members globally. Rogue is the official equipment supplier of the CrossFit Games, USA Weightlifting, the Arnold Strongman Classic, and the World’s Strongest Man competition. The company remains dedicated to serving the needs of serious athletes at every level, from the garage to the arena.