Job Description
Title: Application Security Engineer
\n
Location: NYC NY
\n
Onsite Role
\n
Duration: 12+ Months
\n
\n
Technical Requirements -
\n
\n
- \n
- 5+ years Hands‐on experience with Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush).
- 4+ Hands‐on experience with Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing).
- Deep understanding of OWASP Top 10, application security principles, secure development practices.
- 5+ Experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
- Experience analyzing HTTP traffic, headers, payloads, and attack vectors (XSS, SQLi, RCE, deserialization, CSRF, SSRF, etc.).
- Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
- Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.
\n
\n
\n
\n
\n
\n
\n
\n