Zero Trust & WAF Engineer — Cloud Security & SOC

Deloitte France; Cincinnati (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Deloitte Global is seeking an Application Security Engineer to join the Application Edge Protection Service within CyberSecurity. You will deploy, configure, and maintain Web Application Firewall systems and Zero Trust Proxy to protect global customers, while analyzing events and logs with SOC collaboration.

Responsibilities include incident response, risk detection, CDN integration with Akamai/Radware, vulnerability identification, and detailed documentation.

Qualifications

• Bachelor's Degree in Information Security, IT, CS, Engineering, or equivalent experience
• 4+ years with minimum 2 years in network security and 2 years in application security
• Strong knowledge of web application security concepts and related mitigation techniques
• Understanding of OAuth, SAML, OIDC authentication flows
• Experience with Web Application Firewalls, Zero Trust Network Access, APIs, and cloud security policies
• Familiarity with API security issues and authentication
• Good understanding of information security principles and policy enforcement
• Strong HTTP protocol troubleshooting via logs
• Experience with security operations and cross‑functional collaboration
• Security certifications (e.g., CISSP/CISM) desired
• Bilingual a plus (Spanish/Japanese)
• Automation/Scripting and CI/CD exposure

Responsibilities

• Web Application Firewall Management: Deploy, configure, and maintain WAF systems to protect web applications
• Zero Trust Proxy: Deploy, configure and maintain Zero Trust Proxy systems to support identity gates
• Security Incident Response: Monitor and analyze security events, alerts, and logs; investigate and respond with SOC
• Detection and Analysis: Develop and maintain detection rules, alerts, and reports from logs
• CDN Integration: Collaborate to integrate WAF with CDNs (Akamai, Radware)
• Vulnerability Assessment: Use WAF data to identify vulnerabilities and remediation
• Documentation and Reporting: Maintain WAF configuration docs; prepare security metrics
• Collaboration: Explain security details to non-security teams; cross-functional alignment

Skills

WAF

Zero Trust

Cloud security

API security

OAuth/OIDC

HTTP logs

Web development basics

SOC liaison

Automation/Scripting

Akamai

Education

Bachelor's Degree in Information Security/IT/CS/Engineering

Tools

Akamai WAF

Zero Trust Proxy

Job description

Deloitte Global is seeking an Application Security Engineer to join the Application Edge Protection Service within CyberSecurity. You will deploy, configure, and maintain Web Application Firewall systems and Zero Trust Proxy to protect global customers, while analyzing events and logs with SOC collaboration.

Responsibilities include incident response, risk detection, CDN integration with Akamai/Radware, vulnerability identification, and detailed documentation.