WAF Cyber Security Engineer

Clarivate•Belgrade, ME

61d•Hybrid

About The Position

We are seeking a motivated and skilled Cyber Security Engineer to join Product Security team. This role will primarily focus on managing and enhancing Web Application Firewalls (WAFs) and strengthening Product Security. The ideal candidate will bring hands-on experience with security technologies, a keen understanding of application security challenges, and the ability to collaborate effectively across product and engineering teams. The Cybersecurity Engineer will work within Clarivate's global security team, focusing on Security Engineering & Operations, Product Security, Security Architecture, and Governance, Risk & Compliance. You will contribute to incident response, risk management, compliance, and security tool integration while ensuring best practices are followed across our cloud and on-prem environments.

Requirements

Minimum 5 years of experience in cyber security, with emphasis on WAF, application and cloud security
2 years of experience working with WAF solutions (e.g., AWS WAF, or Azure WAF or F5 Cloudflare WAF)
2 years of experience working with cloud platforms (AWS /Azure / GCP) and related security practices
1 year of experience working with secure SDLC, OWASP Top 10 and application security vulnerabilities
Bachelor's degree in computer science, software engineering, or related field and/or equivalent experience
Proficiency in English

Nice To Haves

Familiarity with security frameworks and standards such as NIST, OWASP, CSA.
Hands-on experience with vulnerability scanning, and incident response.
Strong understanding of networking concepts, application protocols (HTTP/HTTPS), and cloud security.
Relevant certifications such as CISSP, CCSP, CySA+ are a plus.
Experience with automation of security controls.
Exposure to security tools such as DAST, RBVM, SAST.
Familiar with cloud architecture, container security and DevSecOps practices.

Responsibilities

Design, deploy, configure, and maintain Web Application Firewalls (WAF) to protect enterprise web applications from cyber threats.
Conduct security assessments of products to identify vulnerabilities.
Monitor, analyze, and respond to security alerts and incidents related to WAFs and application security.
Collaborate with development and product teams to integrate security best practices into the product lifecycle.
Implement security controls and policies aligned with industry standards and regulatory requirements.
Participate in vulnerability management, penetration testing, and remediation efforts.
Develop and enforce security controls security documentation, aligned with industry standards and compliance requirements.