Zero Trust & WAF Security Engineer

Deloitte France; Tampa (FL); On-site; USD 110,000 - 160,000; Full time

Job summary

Deloitte Global seeks an Application Security Engineer to strengthen our web app protections and Zero Trust posture. You will deploy, configure, and maintain WAFs, manage Zero Trust Proxy connectors, and analyze logs to detect threats across global customer deployments.

Collaborate with SOC, infrastructure, and development teams to implement remediation, craft detection rules, and report security trends. Strong communication skills and experience with cloud security are essential.

Qualifications

• Bachelor's degree in Information Security, IT, CS, Engineering or equivalent.
• 4+ years in security; at least 2 years in network security and 2 in application security.
• Strong web app security knowledge, OWASP Top 10.
• Experience with WAF, Zero Trust Network Access, APIs, and cloud security.
• Understanding OAuth/OIDC; authentication flows.
• Excellent communication and ability to explain security to non-security teams.

Responsibilities

• Web Application Firewall Management: Deploy, configure, and maintain WAF systems to protect web apps.
• Zero Trust Proxy: Deploy, configure, and maintain ZT proxies and connectors.
• Security Incident Response: Monitor, analyze logs, and respond to incidents with SOC support.
• Detection and Analysis: Develop alerts and reports to identify risks and share findings.
• CDN Integration: Collaborate to integrate WAF with CDNs like Akamai/Radware.
• Vulnerability Assessment: Use WAF data to identify vulnerabilities and recommend remediation.
• Documentation and Reporting: Maintain docs and prepare security reports and trends.
• Collaboration: Explain security details to non-security teams and guide developers.

Skills

WAF management

Zero Trust

Security incident response

Log analysis

Threat detection

Education

Bachelor's degree in Information Security / IT / CS or equivalent

Tools

WAF

Zero Trust Proxy

APIs security

Cloud security

Job description

Deloitte Global seeks an Application Security Engineer to strengthen our web app protections and Zero Trust posture. You will deploy, configure, and maintain WAFs, manage Zero Trust Proxy connectors, and analyze logs to detect threats across global customer deployments.

Collaborate with SOC, infrastructure, and development teams to implement remediation, craft detection rules, and report security trends. Strong communication skills and experience with cloud security are essential.