Web Application Firewall Engineer

Vylor Inc.; Johnston (IA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Development opportunities

Health benefits

Paid time off

Parental leave

Retirement plan

Tuition reimbursement

Job summary

Vylor Inc. is seeking a Web Application Firewall Engineer to safeguard applications and data across our enterprise.

You will collaborate with development, security, and infrastructure teams to assess and enforce WAF controls in both development and production environments. With 7–10 years’ experience in WAF technologies, you will tune rules, analyze threats, and drive security best practices while minimizing business impact.

Qualifications

• Bachelor's degree or equivalent experience preferred.
• 7–10 years of experience with WAF technologies and/or networking.
• Hands-on experience administering enterprise WAF platforms such as Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.
• Deep understanding of OWASP Top 10, API security, bot mitigation, DDoS protection, and web application attack patterns.
• Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.
• Knowledge of HTTP/S, TLS, DNS, CDN, reverse proxy, load balancing, and web application architectures.
• Experience partnering with application, infrastructure, cloud, and security operations teams to onboard and protect applications.

Responsibilities

• Configure, tune, test, and optimize WAF policies and rules.
• Monitor WAF alerts, traffic, and security events for threats.
• Collaborate with development, infra, cloud, and network teams to deploy controls.
• Assist in developing and implementing security policies.
• Support data security, regulatory compliance, and DDoS mitigation.
• Prepare status reports and risk analysis scenarios.
• Enforce security policies by reviewing violations and updating controls.
• Provide on-call support for WAF operations and incident response.

Skills

WAF policy tuning

Security incident response

Threat detection

Strong communication

Problem solving

Cross-functional collaboration

Education

Bachelor's degree or equivalent experience

Tools

Akamai WAF

Cloudflare WAF

F5 WAF

Imperva WAF

Azure WAF

AWS WAF

Job description

Join Vylor—Powering the Future of Agriculture

At Vylor, we’re advancing agriculture through breakthrough science—combining elite germplasm, cutting‑edge biotech, and next‑generation expertise in gene editing and molecular breeding. Our portfolio includes trusted industry brands like Pioneer®, Brevant®, and Hoegemeyer®, delivering performance farmers rely on.

Join us to help scale innovation globally and shape what’s next in crop science.

Who are we and what do we do?

Vylor is a global leader in advanced seed and genetics. For more than a century, we've advanced scientific discovery and breakthrough innovation to help farmers feed and fuel the world. Our business is backed by next‑generation scientific expertise and multiple, distinct routes to market, like our industry‑leading seed brands and our licensing business.

The Vylor innovation engine is anchored in the agriculture industry’s most elite germplasm and transformative biotech. The company will leverage its next generation scientific expertise in disciplines like gene editing and molecular breeding to further strengthen its core business while exploring opportunities to expand to new row crops – and potentially beyond. Vylor will scale these innovations using its leading routes‑to‑market and by significantly expanding its licensing business.

Role Summary

The Web Application Firewall Engineer is responsible for developing, evaluating and managing systems security across the enterprise. This role will work closely with the application development teams to assess applications in development as well as in production. The Web Application Firewall Engineer will help safeguard applications and data from threats and define and drive the implementation of these capabilities.

Primary Responsibilities - How will you help us Grow

• Configure, tune, test, and optimize Web Application Firewall (WAF) policies and rules to protect web applications and APIs from threats such as OWASP Top 10 vulnerabilities, automated attacks, malicious payloads, and suspicious traffic patterns.
• Monitor WAF alerts, application traffic, and security events to identify threats, investigate anomalies, reduce false positives, and recommend appropriate remediation actions.
• Partner with application development, infrastructure, cloud, and network teams to understand application behavior, define security requirements, and implement WAF controls with minimal business disruption.
• Assists in the development and implementation of security policies and procedures.
• Instrumental in data security, regulatory compliance, DDoS mitigation, application protection, and threat detection.
• Prepares status reports on security matters to develop security risk analysis scenarios and response procedures.
• Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls.
• Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.
• Provides direct support to the business and IT staff for systems security related issues.
• Participates in on‑call to support WAF operations, respond to security events, troubleshoot urgent production issues, and coordinate timely escalation or remediation as needed.

Education and Experience – What you will bring to the table!

• Bachelor's degree or equivalent experience preferred.
• 7–10 years of experience with WAF technologies and/or networking.
• Hands‑on experience administering enterprise WAF platforms such as Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.
• Deep understanding of OWASP Top 10, API security, bot mitigation, DDoS protection, and web application attack patterns.
• Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.
• Knowledge of HTTP/S, TLS, DNS, CDN, reverse proxy, load balancing, and web application architectures.
• Experience partnering with application, infrastructure, cloud, and security operations teams to onboard and protect applications.
• Familiarity with SIEM/SOAR integrations, logging, alerting, incident response, and threat detection workflows.Ability to document standards, operational procedures, exceptions, and risk‑based decisions.
• Preferred certifications could include CISSP, CSSLP, GIAC, AWS/Azure security, or vendor‑specific WAF certifications.
• Strong analysis and problem‑solving skills and the ability to develop processes and methodologies.
• Ability to rapidly learn and take advantage of new concepts, business models, and technologies.
• Ability to prioritize work to meet tight deadlines and customer needs.
• Ability to communicate effectively with strong oral, written, and presentation skills.

Benefits – How We’ll Support You

• Numerous development opportunities offered to build your skills
• Be part of a company with a higher purpose and contribute to making the world a better place
• Health benefits for you and your family on your first day of employment
• Four weeks of paid time off and two weeks of well‑being pay per year, plus paid holidays
• Excellent parental leave which includes a minimum of 16 weeks for mother and father
• Future planning with our competitive retirement savings plan and tuition reimbursement program
• Learn more about our total rewards package here - Vylor Benefits
• Check out life at Vylor! https://www.linkedin.com/company/vylorgenetics/

Are you a good match? We seek applicants from all backgrounds to ensure we get the best, most creative talent on our team.

Vylor is an equal opportunity employer. We are committed to embracing our differences to enrich lives, advance innovation, and boost company performance. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, military or veteran status, pregnancy related conditions (including pregnancy, childbirth, or related medical conditions), disability or any other protected status in accordance with federal, state, or local laws.