Web Service Protection Engineer

Black Canyon Consulting LLC; Fairfax (VA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan with employer contribution

Paid holidays

Vacation

Tuition reimbursement

Job summary

Black Canyon Consulting LLC is seeking a Web Service Protection Engineer to support the National Center for Biotechnology Information (NCBI) on-site at Bethesda, MD. The role focuses on protecting high-traffic web services, tuning edge security controls, and enforcing traffic policies across hybrid environments.

You will build dashboards, analyze logs, and respond to incidents with clear, actionable information.

Qualifications

• Strong understanding of high-volume web service architecture and traffic flows.
• Hands-on experience with a major cloud provider's security and networking stack.
• Solid grasp of HTTP/HTTPS protocol internals and traffic analysis.
• Experience analyzing traffic using network and application-layer signals.
• Familiarity with web server platforms and log formats.
• Ability to tune access control and rate-limiting rules under pressure.

Responsibilities

• Develop and own protection metrics and alerting; build dashboards and alert pipelines.
• Perform deep log analysis to identify abuse, DDoS, and attack patterns.
• Operate and tune cloud-based edge security controls and policies.
• Enforce traffic controls and mitigate abusive traffic while minimizing impact on legitimate users.
• Monitor continuously and triage incidents with clear, actionable information.
• Support protection across hybrid cloud and on-premises infrastructure.

Skills

Web service architecture

Cloud security

HTTP/HTTPS internals

Traffic analysis

Access control & rate limiting

Hybrid infrastructure

Tools

WAF capabilities

Log querying

Edge security policies

Job description

Overview

Black Canyon Consulting (BCC) is searching for a Web Service Protection Engineer to support the National Center for Biotechnology (NCBI). This opportunity is full time and onsite at the NCBI in Bethesda, MD.
NCBI is part of the National Library of Medicine (NLM) at the National Institutes of Health (NIH). NCBI is the world's premier biomedical center hosting over six million daily users that seek research, clinical, genetic, and other information that directly impacts biomedical research and public health - at NCBI you can literally help to accelerate cures for diseases! NCBI's wide range of applications, platforms (node, python, Django, C++, you name it) and environments (big data [petabytes], machine learning, multiple clouds) serve more users than almost any other US Government Agency according to https://analytics.usa.gov/.
We attract the best people in the business with our competitive benefits package that includes medical, dental and vision coverage, 401k plan with employer contribution, paid holidays, vacation, and tuition reimbursement. If you enjoy being a part of a high performing, professional service and technology focused organization, please apply today!

Duties & Responsibilities

• Develop and own protection metrics and alerting - build dashboards and alert pipelines that surface anomalies across a range of network and application-layer signals.
• Perform deep log analysis to identify overuse, scraping, abuse, DDoS, and attack patterns across millions of daily requests.
• Operate and tune cloud-based edge security controls - configure and update security policies, rate limiting, and adaptive protection rules in response to evolving threats.
• Enforce traffic controls - apply a range of mitigation strategies to abusive traffic while minimizing impact to legitimate users.
• Monitor continuously and respond quickly - this role requires a bias for action. You will triage incidents and either resolve them directly or elevate to development or sysadmin teams with clear, actionable information.
• Support protection across a mixed cloud and on-premises infrastructure - NCBI operates services in both environments, and protection coverage must extend consistently across both.

Requirements

• Strong understanding of high-volume web service architecture - how traffic flows, where bottlenecks and abuse vectors appear, and how load balancers and edge infrastructure make routing decisions.
• Hands-on experience with a major cloud provider's security and networking stack, including:
  • Global load balancing and traffic management
  • Edge-layer security policy enforcement and WAF capabilities
  • Large-scale log querying and metric-driven alerting
• Solid grasp of HTTP/HTTPS protocol internals - headers, TLS behavior, connection patterns, and how these relate to traffic analysis and fingerprinting techniques.
• Experience analyzing traffic using network and application-layer signals including address-based, organizational, and transport-layer fingerprinting methods.
• Familiarity with common web server platforms, their log formats, and configuration.
• Ability to read, write, and tune access control and rate-limiting rules under pressure.
• Comfort working across hybrid infrastructure environments.

Preferred Skills

• Experience with advanced abuse mitigation techniques, including traffic redirection and challenge-response mechanisms.
• Scripting or automation experience (Python, Bash, or similar) for log parsing and rule generation.
• Prior work protecting high-traffic government or research platforms.
• Knowledge of bot detection techniques beyond simple blocking - behavioral signals, fingerprinting, headless browser detection, and similar approaches.
• Familiarity with evolving attacker tradecraft and how modern scrapers and abusers adapt to countermeasures.

Benefits and Salary

We attract the best people in the business with our competitive benefits package that includes medical, dental and vision coverage, 401k plan with employer contribution, paid holidays, vacation, and tuition reimbursement.
We offer a competitive salary commensurate with experience and location. If you enjoy being a part of a high performing, professional service and technology focused organization, please apply today!