Web Application Firewall Engineer

Iowa Ag; Des Moines, Northern (IA, KY); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Parental leave

Retirement plan

Tuition reimbursement

Job summary

Vylor in Des Moines, IA is seeking a Web Application Firewall Engineer to design, implement, and manage WAF security for web apps and APIs. You will collaborate with development, infrastructure, cloud, and security teams to tune rules, monitor threats, and minimize risk in both development and production environments.

The ideal candidate has 7–10 years' experience with WAFs and networking, hands-on work with Akamai, Cloudflare, F5, Imperva, or AWS/Azure WAF, and strong OWASP Top 10, API

Qualifications

• Bachelor's degree or equivalent experience.
• 7-10 years of experience with WAF technologies and/or networking.
• Strong knowledge of OWASP Top 10, API security, bot mitigation, and DDoS protection.
• Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.

Responsibilities

• Configure, tune, test, and optimize WAF policies and rules to protect web applications and APIs from threats.
• Monitor WAF alerts, application traffic, and security events to identify threats and reduce false positives.
• Partner with application development, infrastructure, cloud, and network teams to implement WAF controls with minimal business disruption.
• Assists in the development and implementation of security policies and procedures.
• Instrumental in data security, regulatory compliance, DDoS mitigation, application protection, and threat detection.
• Prepares security risk analysis scenarios and response procedures.

Skills

WAF technologies

Networking

Akamai

Cloudflare

F5

OWASP Top 10

DDoS mitigation

API security

SIEM/SOAR integrations

Security operations

Education

Bachelor's degree or equivalent experience

Tools

Akamai WAF

Cloudflare WAF

F5 BIG-IP

Imperva WAF

Azure WAF

AWS WAF

Job description

# Web Application Firewall EngineerBack to search resultsApply to this positionFollow CompanyMore Jobs from VylorSend to Friend**Join Vylor—Powering the Future of Agriculture**? At Vylor, we're advancing agriculture through breakthrough science—combining elite germplasm, cutting-edge biotech, and next-generation expertise in gene editing and molecular breeding. Our portfolio includes trusted industry brands like Pioneer , Brevant , and Hoegemeyer , delivering performance farmers rely on.? Join us to help scale innovation globally and shape what's next in crop science.**Who are we and what do we do?****Vylor** is a global leader in advanced seed and genetics. For more than a century, we''ve advanced scientific discovery and breakthrough innovation to help farmers feed and fuel the world. Our business is backed by next-generation scientific expertise and multiple, distinct routes to market, like our industry-leading seed brands and our licensing business. The **Vylor** innovation engine is anchored in the agriculture industry's most elite germplasm and transformative biotech. The company will leverage its next generation scientific expertise in disciplines like gene editing and molecular breeding to further strengthen its core business while exploring opportunities to expand to new row crops - and potentially beyond. Vylor will scale these innovations using its leading routes-to-market and by significantly expanding its licensing business. **Role Summary**The **Web Application Firewall Engineer** is responsible for developing, evaluating and managing systems security across the enterprise. This role will work closely with the application development teams to assess applications in development as well as in production. The Web Application Firewall Engineer will help safeguard applications and data from threats and define and drive the implementation of these capabilities. **Primary Responsibilities - How will you help us Grow**!* Configure, tune, test, and optimize Web Application Firewall (WAF) policies and rules to protect web applications and APIs from threats such as OWASP Top 10 vulnerabilities, automated attacks, malicious payloads, and suspicious traffic patterns.* Monitor WAF alerts, application traffic, and security events to identify threats, investigate anomalies, reduce false positives, and recommend appropriate remediation actions.* Partner with application development, infrastructure, cloud, and network teams to understand application behavior, define security requirements, and implement WAF controls with minimal business disruption.* Assists in the development and implementation of security policies and procedures.* Instrumental in data security, regulatory compliance, DDoS mitigation, application protection, and threat detection.* Prepares status reports on security matters to develop security risk analysis scenarios and response procedures.* Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls.* Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.* Provides direct support to the business and IT staff for systems security related issues.* Participates in on-call to support WAF operations, respond to security events, troubleshoot urgent production issues, and coordinate timely escalation or remediation as needed. **Education and Experience - What you will bring to the table!*** Bachelor''s degree or equivalent experience preferred.* 7-10 years of experience with WAF technologies and/or networking.* Hands-on experience administering enterprise WAF platforms such as Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.* Deep understanding of OWASP Top 10, API security, bot mitigation, DDoS protection, and web application attack patterns.* Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.* Knowledge of HTTP/S, TLS, DNS, CDN, reverse proxy, load balancing, and web application architectures.* Experience partnering with application, infrastructure, cloud, and security operations teams to onboard and protect applications.* Familiarity with SIEM/SOAR integrations, logging, alerting, incident response, and threat detection workflows.Ability to document standards, operational procedures, exceptions, and risk-based decisions.* Preferred certifications could include CISSP, CSSLP, GIAC, AWS/Azure security, or vendor-specific WAF certifications.* Strong analysis and problem-solving skills and the ability to develop processes and methodologies.* Ability to rapidly learn and take advantage of new concepts, business models, and technologies.* Ability to prioritize work to meet tight deadlines and customer needs.* Ability to communicate effectively with strong oral, written, and presentation skills.**Benefits - How We'll Support You:*** Numerous development opportunities offered to build your skills* Be part of a company with a higher purpose and contribute to making the world a better place* Health benefits for you and your family on your first day of employment* Four weeks of paid time off and two weeks of well-being pay per year, plus paid holidays* Excellent parental leave which includes a minimum of 16 weeks for mother and father* Future planning with our competitive retirement savings plan and tuition reimbursement program* Learn more about our total rewards package here - Vylor Benefits* Check out life at Vylor! https://www.linkedin.com/company/vylorgenetics/Are you a good match? Apply today! We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team. ### Vylor is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.