WAF & Application Security Lead

Minnesota IT Services; Saint Paul (MN); On-site; USD 90,000 - 140,000; Full time

Job summary

Minnesota IT Services (MNIT) seeks an Information Security Supervisor to lead the Web Application Firewall and Application Security programs, protecting State of Minnesota web apps enterprise-wide. This working supervisor role blends leadership with hands-on duties—configuring, tuning, and responding during high-priority events—while guiding statewide secure coding and deployment practices across agencies.

The position requires onsite work at 600 Robert St.

Qualifications

• Minimum of three years of IT experience in information security or related field.
• Experience with web application security and WAF technologies.
• Experience with application security, vulnerability scanning, and remediation.
• Knowledge of enterprise networking and security technologies.
• Experience with OWASP frameworks and secure development practices.
• Experience managing security projects, vendors, or technology solutions.
• Strong communication and leadership abilities.

Responsibilities

• Lead WAF and application security programs enterprise-wide.
• Direct a team for implementing, configuring, monitoring, and optimizing WAF services.
• Provide hands-on support during high-priority security events.
• Mentor staff and guide statewide application security practices.
• Coordinate security scanning platforms (DAST, SCA) integration and governance.
• Deliver advisory services to security professionals and development teams.

Skills

Web application security

WAF technologies

Vulnerability scanning

Application security governance

Security project management

Clear communication

Leadership and people engagement

Tools

OWASP frameworks

Job description

Minnesota IT Services (MNIT) seeks an Information Security Supervisor to lead the Web Application Firewall and Application Security programs, protecting State of Minnesota web apps enterprise-wide. This working supervisor role blends leadership with hands-on duties—configuring, tuning, and responding during high-priority events—while guiding statewide secure coding and deployment practices across agencies.

The position requires onsite work at 600 Robert St.