Senior WebNetwork Security Engineer

Manifest Solutions; Columbus (OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Manifest Solutions is seeking a Senior Web/Network Security Engineer for an onsite role in Columbus, OH. You will design and support enterprise security solutions across web apps and networks, including F5 Distributed Cloud WAF, API security, bot protection, and Palo Alto firewalls.

The role emphasizes automation via Python, Terraform, and Git, plus on-call incident response. Candidate will onboard apps to WAF services, optimize policies, and defend against OWASP Top 10 and API abuse.

Qualifications

• Experience securing web apps and networks with OWASP Top 10 in mind.
• Hands-on with WAFs, API security and bot protection.
• Strong incident response and vulnerability remediation skills.
• Proficiency in Python REST APIs, Terraform and Git for automation.
• Excellent collaboration with development teams.

Responsibilities

• Design, implement and support enterprise web app and network security solutions.
• Administer and support F5 Distributed Cloud WAF; deploy policies and tune controls.
• Configure API Protection, Bot Defense, DDoS Mitigation, and related policies.
• Investigate false positives; onboard apps to WAF services; reviews.
• Maintain Palo Alto networks, NGFW, VPNs, SSL decryption, NAT and segmentation.
• Develop automation via Python REST APIs, Terraform and Git; build dashboards.
• Participate in incident response, threat hunting, vulnerability remediation, and on-call rotation.

Skills

Bot Management

API Security

DDoS Protection

CDN technologies

DevSecOps

CI/CD pipelines

Kubernetes

Containers

Terraform

Tools

F5 Distributed Cloud WAF

Palo Alto Networks

NGFW Prisma a

Job description

Manifest Solutions is currently seeking a Senior Web/Network Security Engineer for an onsite position in Columbus, OH.

• Design, implementation, and support of enterprise web application and network security solutions.
• Responsible for securing internet-facing applications through F5 Distributed Cloud WAF, API security, bot protection, and network security technologies including Palo Alto firewalls and secure remote access solutions.
• Administer and support F5 Distributed Cloud (XC) WAF platform.
• Deploy and maintain WAF policies, signatures, and security controls.
• Configure: API Protection, Bot Defense, DDoS Mitigation, Geolocation Policies, Rate Limiting, CAPTCHA Challenges
• Investigate and tune false positives.
• Perform application onboarding into WAF services.
• Conduct WAF policy reviews and optimization.
• Support incident response involving web application attacks.
• Understand and mitigate: OWASP Top 10, Authentication attacks. API abuse, Credential stuffing, Session hijacking, Cross-Site Scripting (XSS), SQL Injection, SSRF, CSRF.
• Review application architectures and recommend security improvements.
• Partner with development teams during application onboarding and troubleshooting.
• Network Security: administer and support Palo Alto Networks, NGFW Prism­ a, Access Site-to-site VPNs, SSL decryption, NAT and security policies, Network segmentation, DNS and routing troubleshooting.
• Support production incidents and participate in on-call rotation.
• Develop automation using Python REST APIs, Terraform, Git.
• Build dashboards and reporting around security posture.
• Automate repetitive operational tasks.
• Participate in incident response, threat hunting, security assessments, vulnerability remediation, root cause analysis, architecture reviews.

Qualifications

• Bot Management
• API Security
• DDoS Protection
• CDN technologies
• DevSecOps
• CI/CD pipelines
• Kubernetes
• Containers
• Terraform
• Certifications: OWASP Foundation certifications, ISC2 CISSP, GIAC certifications, F5 certifications, Palo Alto Networks certifications