Staff Web Security Software Engineer - Cloud & WAF

Fortinet, Inc.; Sunnyvale (CA); On-site; USD 150,000 - 215,000; Full time

Job summary

Fortinet, Inc. is seeking an experienced Staff Software Development Engineer to develop and enhance features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation, and more.

You will work with Cloud and Intelligence teams to improve cloud deployment features and false positive handling, while aligning with Product Management on roadmaps and certifications. You will engage with R&D and QA across the lifecycle to deliver high quality features and keep up with

Qualifications

• 8+ years of relevant work experience.
• Bachelor’s degree in Computer Science, Engineering or related technical program.
• Proficient in C language and Linux development tools (gcc, gdb, libc).
• Solid knowledge of HTTP/HTTPS/HTTP2 protocols.
• Familiarity with network firewalls, IDS/IPS, VPN, SSL, WAF, ADC.
• Experience with Linux systems and networking troubleshooting.
• Hands-on with web servers/proxies (Nginx/Apache/Haproxy).
• Understanding of HTML/CSS/JavaScript/JSON/XML and OWASP Top 10.
• Experience with security tools like ModSecurity, Snort, Burp Suite, OWASP ZAP, Metasploit, Sqlmap, Selenium, Puppeteer.
• Strong self-learning abilities.
• Must be authorized to work in the U.S. without sponsorship.

Responsibilities

• Developing and enhancing features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation and so on.
• Enhance debugging and unit testing tools for Web security features.
• Keep abreast of the latest Web security events and provide expertise on Web security event response and internal training.
• Collaborate with Cloud and Intelligence teams to improve features and intelligence DB in cloud deployments, especially on false positives and evasion cases.
• Work with Product Management on roadmaps, new features design, and product certifications.
• Collaborate with R&D and QA throughout the product development lifecycle to deliver high quality features.
• Research new technologies and common tools; devise new solutions.

Skills

Web security concepts

HTTP/HTTPS/HTTP2

Linux troubleshooting

Self-learning

Team collaboration

Security awareness

Education

Bachelor's degree in Computer Science/Engineering or related

Tools

C language

GCC

GDB

libc

GNU Makefile

Nginx

Apache

HAProxy

Burp Suite

OWASP ZAP

Metasploit

Selenium

Puppeteer

ModSecurity

Job description

Fortinet, Inc. is seeking an experienced Staff Software Development Engineer to develop and enhance features in signature engine, header security, CSRF, WAF scripting, API security, Bot mitigation, and more.

You will work with Cloud and Intelligence teams to improve cloud deployment features and false positive handling, while aligning with Product Management on roadmaps and certifications. You will engage with R&D and QA across the lifecycle to deliver high quality features and keep up with