Senior Cybersecurity Engineer: WAF, Cloud Security & IR

Rogue Fitness; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Rogue Fitness seeks a hands-on Senior Cybersecurity Engineer to tune and operate web application firewalls, cloud security controls, SIEM investigations, and endpoint incidents. You will move daily between WAF tuning, cloud security, and threat hunting, ensuring robust defense and rapid remediation.

Based in Columbus, OH, this onsite position requires practical experience with security operations and enterprise protections.

Qualifications

• Hands-on experience administering a web application firewall (e.g., Cloudflare or similar enterprise platform)
• Strong understanding of web security fundamentals: HTTP/HTTPS, DNS, TLS, APIs, OWASP risks
• Experience implementing security controls in GCP, Azure, or another public cloud
• Experience with EDR/XDR platforms (e.g., CrowdStrike) and SIEM/SOAR tools
• Experience with vulnerability management, pentesting, threat hunting, and IR
• Working knowledge of Linux and Windows administration, networking, firewalls, and zero trust/hybrid infra
• Experience supporting PCI DSS, GDPR, or similar compliance and privacy frameworks
• Strong communicator who can work independently and partner with stakeholders

Responsibilities

• Administer and improve WAF platforms; investigate blocked requests, attacks, and false positives
• Implement and maintain security controls across cloud platforms; remediate misconfigurations and excessive permissions
• Support application security and DevSecOps across lifecycle; risk review of APIs, SaaS, and AI apps
• Manage EDR (CrowdStrike) and anti-ransomware protections; operate SIEM/SOAR; build alerts and detections
• Lead incident investigation, containment, remediation, and recovery; maintain IR playbooks; threat intel management
• Run automated penetration testing and attack path analysis; drive remediation across apps, cloud, and infra
• Administer Zscaler; co-manage VMware and Linux servers; monitor via Zabbix
• Maintain PCI DSS, GDPR compliance; support audit prep and evidence gathering; run security awareness training
• Administer Google Workspace identity; MFA, least privilege, investigate suspicious sign-ins

Skills

WAF management

Cloud security

SIEM/SOAR

Threat hunting

Incident response

Linux/Windows

PCI/GDPR compliance

Zero trust

Tools

Cloudflare

CrowdStrike

Halcyon

Google SecOps

NodeZero

Recorded Future

Zscaler

Zabbix

KnowBe4

VMware

Job description

Rogue Fitness seeks a hands-on Senior Cybersecurity Engineer to tune and operate web application firewalls, cloud security controls, SIEM investigations, and endpoint incidents. You will move daily between WAF tuning, cloud security, and threat hunting, ensuring robust defense and rapid remediation.

Based in Columbus, OH, this onsite position requires practical experience with security operations and enterprise protections.