Web Service Security & Resilience Engineer

Black Canyon Consulting LLC; Fairfax (VA); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

401k plan with employer contribution

Paid holidays

Vacation

Tuition reimbursement

Job summary

Black Canyon Consulting LLC is seeking a Web Service Protection Engineer to support the National Center for Biotechnology Information (NCBI) on-site at Bethesda, MD. The role focuses on protecting high-traffic web services, tuning edge security controls, and enforcing traffic policies across hybrid environments.

You will build dashboards, analyze logs, and respond to incidents with clear, actionable information.

Qualifications

• Strong understanding of high-volume web service architecture and traffic flows.
• Hands-on experience with a major cloud provider's security and networking stack.
• Solid grasp of HTTP/HTTPS protocol internals and traffic analysis.
• Experience analyzing traffic using network and application-layer signals.
• Familiarity with web server platforms and log formats.
• Ability to tune access control and rate-limiting rules under pressure.

Responsibilities

• Develop and own protection metrics and alerting; build dashboards and alert pipelines.
• Perform deep log analysis to identify abuse, DDoS, and attack patterns.
• Operate and tune cloud-based edge security controls and policies.
• Enforce traffic controls and mitigate abusive traffic while minimizing impact on legitimate users.
• Monitor continuously and triage incidents with clear, actionable information.
• Support protection across hybrid cloud and on-premises infrastructure.

Skills

Web service architecture

Cloud security

HTTP/HTTPS internals

Traffic analysis

Access control & rate limiting

Hybrid infrastructure

Tools

WAF capabilities

Log querying

Edge security policies

Job description

Black Canyon Consulting LLC is seeking a Web Service Protection Engineer to support the National Center for Biotechnology Information (NCBI) on-site at Bethesda, MD. The role focuses on protecting high-traffic web services, tuning edge security controls, and enforcing traffic policies across hybrid environments.

You will build dashboards, analyze logs, and respond to incidents with clear, actionable information.