WAF & Web Security Systems Engineer III

Jobtailor; California (MO); On-site; USD 90,000 - 150,000; Full time

Job summary

Jobtailor is seeking a security-focused engineer to create and enforce WAF policies across global eCommerce sites, continuously adapting ingress rules as threats evolve. You will mature client-side fingerprinting and coordinate with network/SRE teams to secure ingress points.

The role emphasizes hands-on WAF management, DDoS mitigation, and security infrastructure operations for protecting worldwide platforms against web attacks and fraud.

Qualifications

• Bachelor's degree or 2–4 years experience in systems and infrastructure engineering or related area at a technology, retail, or data-driven company; or 4 years’ experience in the same areas
• Hands-on experience with Web Application Firewall (WAF) management and DDoS mitigation strategies
• Strong knowledge of TCP/IP, IPSec, HTTPS, and SSL
• Deep understanding of web properties and Content Delivery Networks (CDNs)
• Experience with client-side fingerprinting and behavioral data collection
• Proficiency with Splunk, Kibana, or ArcSight
• Strong scripting skills in at least one language
• Familiarity with Azure and GCP
• Knowledge of WCAG 2.2 AA standards, assistive technologies, and digital accessibility best practices preferred
• Master’s degree in a relevant field preferred

Responsibilities

• Create, tune, and enforce Web Application Firewall (WAF) policies across global eCommerce sites
• Continuously evaluate and adapt ingress security policies based on the evolving threat landscape
• Mature client-side evaluation and fingerprinting capabilities
• Assess and manage protection strategies during active cyber-attacks
• Control and monitor scripted traffic across all digital properties
• Collaborate with network and site reliability teams to secure all ingress points
• Build, deploy, and manage security infrastructure and operations supporting overall web security
• Protect global eCommerce platforms from web-based attacks, DDoS attacks, unwanted scripted traffic, and fraud

Skills

WAF Management

DDoS Mitigation

TCP/IP

HTTPS/SSL

Client-Side Fingerprinting

Scripting

Security Infrastructure Operations

Analytical Skills

Interpersonal Communication

Education

Bachelor's degree in Computer Science / Information Technology / Engineering / Information Systems / Cybersecurity

Master's degree preferred

Tools

Splunk

Kibana

ArcSight

Azure

GCP

Job description

Jobtailor is seeking a security-focused engineer to create and enforce WAF policies across global eCommerce sites, continuously adapting ingress rules as threats evolve. You will mature client-side fingerprinting and coordinate with network/SRE teams to secure ingress points.

The role emphasizes hands-on WAF management, DDoS mitigation, and security infrastructure operations for protecting worldwide platforms against web attacks and fraud.