Systems and Infrastructure Engineer III, Information Security

Jobtailor; California (MO); On-site; USD 90,000 - 150,000; Full time

Job summary

Jobtailor is seeking a security-focused engineer to create and enforce WAF policies across global eCommerce sites, continuously adapting ingress rules as threats evolve. You will mature client-side fingerprinting and coordinate with network/SRE teams to secure ingress points.

The role emphasizes hands-on WAF management, DDoS mitigation, and security infrastructure operations for protecting worldwide platforms against web attacks and fraud.

Qualifications

• Bachelor's degree or 2–4 years experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company; or 4 years’ experience in the same areas
• Hands-on experience with Web Application Firewall (WAF) management and DDoS mitigation strategies
• Strong knowledge of TCP/IP, IPSec, HTTPS, and SSL
• Deep understanding of web properties and Content Delivery Networks (CDNs)
• Experience with client-side fingerprinting and behavioral data collection
• Proficiency with Splunk, Kibana, or ArcSight
• Strong scripting skills in at least one language
• Familiarity with Azure and GCP
• Knowledge of WCAG 2.2 AA standards, assistive technologies, and digital accessibility best practices preferred
• Master’s degree in a relevant field preferred

Responsibilities

• Create, tune, and enforce Web Application Firewall (WAF) policies across global eCommerce sites
• Continuously evaluate and adapt ingress security policies based on the evolving threat landscape
• Mature client-side evaluation and fingerprinting capabilities
• Assess and manage protection strategies during active cyber-attacks
• Control and monitor scripted traffic across all digital properties
• Collaborate with network and site reliability teams to secure all ingress points
• Build, deploy, and manage security infrastructure and operations supporting overall web security
• Protect global eCommerce platforms from web-based attacks, DDoS attacks, unwanted scripted traffic, and fraud

Skills

WAF Management

DDoS Mitigation

TCP/IP

HTTPS/SSL

Client-Side Fingerprinting

Scripting

Security Infrastructure Operations

Analytical Skills

Interpersonal Communication

Education

Bachelor's degree in Computer Science / Information Technology / Engineering / Information Systems / Cybersecurity

Master's degree preferred

Tools

Splunk

Kibana

ArcSight

Azure

GCP

Job description

• Create, tune, and enforce Web Application Firewall (WAF) policies across global eCommerce sites


• Continuously evaluate and adapt ingress security policies based on the evolving threat landscape


• Mature client-side evaluation and fingerprinting capabilities


• Assess and manage protection strategies during active cyber-attacks


• Control and monitor scripted traffic across all digital properties


• Collaborate with network and site reliability teams to secure all ingress points


• Build, deploy, and manage security infrastructure and operations supporting overall web security


• Protect global eCommerce platforms from web-based attacks, DDoS attacks, unwanted scripted traffic, and fraud

Requirements

• Bachelor's degree in computer science, information technology, engineering, information systems, cybersecurity, or related area and 2 years’ experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company; or 4 years’ experience in the same areas


• Hands-on experience with Web Application Firewall (WAF) management and DDoS mitigation strategies


• Strong knowledge of TCP/IP, IPSec, HTTPS, and SSL


• Deep understanding of web properties and Content Delivery Networks (CDNs)


• Experience with client-side fingerprinting and behavioral data collection


• Proficiency with Splunk, Kibana, or ArcSight


• Strong scripting skills in at least one language


• Familiarity with Azure and GCP


• Certification in Security+, GISF, CISSP, CCSP, or GSEC preferred


• Master’s degree in a relevant field preferred


• Knowledge of firewalls and DNS preferred


• Knowledge of WCAG 2.2 AA standards, assistive technologies, and digital accessibility best practices preferred


• Ability to work in a security-focused environment with analytical, problem-solving, and interpersonal communication skills

Core Competencies

Demonstrates expertise in Web Application Firewall (WAF) management, DDoS mitigation, and security infrastructure operations to protect global eCommerce platforms. Proficient in analyzing and adapting security policies in response to evolving threats while collaborating with cross-functional teams.

Highest-signal resume keywords

• Web Application Firewall (WAF) Management


• DDoS Mitigation Strategies


• TCP/IP, IPSec, HTTPS, SSL


• Splunk, Kibana, ArcSight


• Security+ Certification

Hard Skills

• Web Application Firewall (WAF) Management


• DDoS Mitigation Strategies


• TCP/IP


• IPSec


• HTTPS


• SSL


• Client-Side Fingerprinting


• Scripting Skills


• Security Infrastructure Operations


• Digital Accessibility Best Practices

Soft Skills

• Analytical Skills


• Problem-Solving Skills


• Interpersonal Communication Skills

Certifications & Qualifications

• Security+


• GISF


• CISSP


• CCSP


• GSEC

Industry Keywords

• ECommerce


• Cybersecurity


• Content Delivery Networks (CDNs)


• Firewalls


• DNS


• WCAG 2.2 AA Standards

Tools & Technologies

• Splunk


• Kibana


• ArcSight


• Azure


• GCP