Information Security Engineer

Watts Water Technologies•Andover, MA

3d•$118,000 - $131,000•Hybrid

About The Position

Watts Water Technologies is seeking a mid-level Information Security Engineer to own its edge and web application security program. The role focuses on Cloudflare, application security, and reducing the company’s internet-facing attack surface. The engineer will own these platforms end to end and work alongside the Enterprise Security Engineering and Incident Response teams. The position is based in an office environment in Andover, Massachusetts, with work in the office three days per week, Monday through Wednesday, and remote work two days per week, Thursday and Friday. The expected salary range is $118,000–$131,000 per year. Compensation depends on skills, experience, qualifications, and applicable law.

Requirements

Bachelor’s degree or equivalent practical experience.
At least 5 years of hands-on information security experience.
Demonstrated experience independently administering a WAF or edge security platform, including creating and tuning rules.
Hands-on experience running or significantly contributing to a web application security or vulnerability management program, including triaging findings and driving remediation with application owners.
General understanding of security disciplines beyond the primary focus, such as network security principles, DNS security, SIEM and log management, endpoint security, or cloud security in AWS and Azure; depth in all areas is not expected.
Commitment to Watts’ values of integrity, accountability, continuous improvement and innovation, and transparency.
Punctuality and dependability; ability to adapt to changing work priorities and stressful conditions; and ability to maintain productive, collaborative working relationships.
Ability to perform the described office and computer-based duties, including remaining seated for extended periods, repetitive keyboard or mouse use, moving around the office, reading and data entry, communicating with coworkers and management, operating standard office equipment, and occasionally lifting or carrying light objects.

Nice To Haves

Cloudflare experience.
Relevant certifications such as Security+, GWAPT, GWEB, or an AWS or Azure associate-level security certification.

Responsibilities

Manage Cloudflare end to end, including WAF policy and rule tuning, DNS configuration, bot management, rate limiting, and edge security controls across public-facing properties.
Run the web application security program by managing scanning coverage and scheduling, validating and triaging findings, and driving remediation with application owners through closure.
Manage the external attack surface by tracking internet-facing assets, identifying unintended exposure, and coordinating remediation with asset-owning teams.
Translate security findings into practical guidance for application, infrastructure, and network teams, and work with them through resolution.
Partner with the broader Information Security team on investigations, security projects, and acquisition integration work as priorities require.
Follow Watts’ personnel policies, procedures, and standards of process, and maintain productive, collaborative relationships with other employees.
Demonstrate Watts’ cultural beliefs and values, including integrity, accountability, continuous improvement, innovation, transparency, communication, inclusion, and taking action.