Senior WAF Engineer: Remote Autonomous Defense Lead

ResumeXrays LLC; United States; Remote; USD 175,000 - 230,000; Full time

Benefits offered by this job

Remote Work

Inclusive Team

Growth Opportunities

Innovative Culture

Competitive Compensation

Job summary

Horizon3 is seeking a Senior Web Application Firewall Engineer to define what “correct” means for WAF effectiveness and remediation. You will sit between Product and Engineering, ensuring domain truth drives measurable outcomes, not firefighting alerts.

This role is remote within the United States and focuses on policy, tuning, and threat-informed guidance. The candidate brings 5+ years in security engineering with hands-on WAF tuning across multiple platforms, strong technical writing, and

Qualifications

• 5+ years in application security, security engineering, or related fields.
• Hands-on experience tuning WAF platforms in production.
• Understanding of SOC workflows and incident triage.
• Fluency in false-positives/negatives tradeoffs and policy effectiveness.

Responsibilities

• Partner with Product to turn WAF effectiveness and tuning ambitions into concrete, buildable requirements.
• Translate blue team workflows into prioritized product outcomes and push back on infeasible features.
• Define acceptance criteria for detection and tuning features and validate releases.
• Serve as the domain reference for Engineering and AI research during design reviews.

Skills

WAF platforms

WAF tuning

AppSec

SOC collaboration

Python scripting

SQL

Threat hunting

Incident response

Tools

AWS WAF

Cloudflare WAF

F5 Advanced WAF

Imperva

Akamai App & API Protector

FortiWeb

ModSecurity with OWASP CRS

Job description

Horizon3 is seeking a Senior Web Application Firewall Engineer to define what “correct” means for WAF effectiveness and remediation. You will sit between Product and Engineering, ensuring domain truth drives measurable outcomes, not firefighting alerts.

This role is remote within the United States and focuses on policy, tuning, and threat-informed guidance. The candidate brings 5+ years in security engineering with hands-on WAF tuning across multiple platforms, strong technical writing, and