Senior Security Engineer - Web Apps & Network Defense

Blue Star Partners LLC; Columbus (OH); Hybrid; USD 96,432 - 108,830; Full time

Benefits offered by this job

Hybrid schedule

Remote Mondays & Fridays

Job summary

Blue Star Partners LLC is seeking a Senior Security Engineer – Web Application & Network Protection for a contract-to-hire engagement in Columbus, OH. You will design, implement, and support enterprise security for web apps and critical services, focusing on WAF, API security, bot protection, DDoS mitigation, and network controls.

The role blends security architecture with hands-on operation, automation, and collaboration across security, infrastructure, and development teams.

Qualifications

• 7+ years in cybersecurity engineering with focus on web application security, network security, or cloud security.
• Hands-on experience administering WAF technologies in an enterprise environment.
• Experience with F5 Distributed Cloud (XC) WAF or comparable platforms.
• Automation and scripting using Python, REST APIs, Terraform, and Git.

Responsibilities

• Administer and tune WAF, API security, bot protection, and DDoS controls for enterprise applications.
• Onboard applications into F5 Distributed Cloud WAF and coordinate requirements with application teams.
• Review alerts, investigate suspicious activity, and respond to web application or network security incidents.
• Develop scripts and automation to improve security operations and reduce manual effort.
• Collaborate with developers, infrastructure engineers, network teams, and security stakeholders to improve protections.

Skills

Cybersecurity engineering

Application security

Network security

Cloud security

Automation

Tools

F5 Distributed Cloud WAF

Palo Alto Networks firewalls

Prisma Access

Terraform

Python

Git

Job description

Blue Star Partners LLC is seeking a Senior Security Engineer – Web Application & Network Protection for a contract-to-hire engagement in Columbus, OH. You will design, implement, and support enterprise security for web apps and critical services, focusing on WAF, API security, bot protection, DDoS mitigation, and network controls.

The role blends security architecture with hands-on operation, automation, and collaboration across security, infrastructure, and development teams.