Barracuda WAF Engineer SME

Ampcus Inc. • McLean, VA

3d • Onsite

About The Position

Ampcus Inc. is seeking an experienced Barracuda WAF Engineer (SME) to deploy, manage, and optimize Barracuda's application security solutions. This role is crucial for protecting web applications and APIs from various threats, including the OWASP Top 10, bot attacks, and DDoS attempts. The engineer will be responsible for ensuring the security and performance of web applications.

Requirements

• Deep understanding of L7 protocols (HTTP/HTTPS), TCP/IP, and web technologies (XML, JSON, REST APIs).
• Proficiency in OWASP Top 10 vulnerabilities and modern web application attack vectors.
• Hands-on experience with public cloud platforms (AWS, Azure) and their native security services.
• Ability to automate WAF deployments and configurations using REST APIs or scripting (Python, PowerShell).
• Typically requires a bachelor’s degree in computer science, IT, or a related field.

Nice To Haves

• Barracuda Web Application Firewall Certified Engineer (WAF01).
• Barracuda WAF-as-a-Service - Foundation (WAS01).
• General security certifications: CISSP, CEH, or CCNA.

Responsibilities

• Install and maintain physical, virtual, or cloud-based Barracuda WAF appliances (e.g., Azure, AWS) in reverse proxy or bridge modes.
• Create, tune, and manage security policies and application profiles to block SQL injection, Cross-Site Scripting (XSS), and CSRF while minimizing false positives.
• Monitor and mitigate application-layer DDoS attacks, both traffic, and advanced persistent threats.
• Configure load balancing, SSL/TLS offloading, caching, and compression to enhance application delivery and speed.
• Analyze logs using tools like Splunk or Azure Monitor and respond to real-time security alerts and incidents.
• Implement Data Loss Prevention (DLP) rules to prevent sensitive data leakage and ensure compliance with standards like PCI DSS or GDPR.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior