Information Security Engineer

Watts Water•Andover, MA

23h•Hybrid

About The Position

Watts Water Technologies is seeking a mid-level Information Security Engineer to own its edge and web application security program. The role focuses on Cloudflare, application security, and reducing the organization’s internet-facing attack surface. The engineer will own these platforms end to end and work alongside the Enterprise Security Engineering and Incident Response teams. The position is based in an office environment in Andover, Massachusetts. Employees are required to work onsite Monday through Wednesday and may work remotely Thursday and Friday. The expected salary range is $118,000–$131,000 per year, with actual compensation dependent on individual skills, experience, qualifications, and applicable law. The role is at will. Watts describes its culture as team-oriented and supportive, with opportunities for learning and development.

Requirements

Bachelor’s degree or equivalent practical experience.
At least 5 years of hands-on information security experience.
Demonstrated experience independently administering a WAF or edge security platform, including creating and tuning rules.
Hands-on experience running or significantly contributing to a web application security or vulnerability management program, including triaging findings and driving remediation with application owners.
General understanding of security disciplines beyond the primary focus, such as network security principles, DNS security, SIEM and log management, endpoint security, or cloud security in AWS and Azure.
Commitment to Watts’ values of integrity, accountability, continuous improvement and innovation, and transparency.
Punctuality and dependability; ability to adapt to changing work priorities and stressful conditions; and ability to maintain productive and collaborative relationships.

Nice To Haves

Cloudflare experience is strongly preferred.
Relevant certifications such as Security+, GWAPT, GWEB, or an AWS or Azure associate-level security certification are preferred.

Responsibilities

Manage Cloudflare end to end, including WAF policy and rule tuning, DNS configuration, bot management, rate limiting, and edge security controls across public-facing properties.
Run the web application security program, including managing scanning coverage and scheduling, validating and triaging findings, and driving remediation with application owners through closure.
Manage the external attack surface by tracking internet-facing assets, identifying unintended exposure, and coordinating remediation with the teams responsible for those assets.
Translate security findings into practical guidance for application, infrastructure, and network teams, and work with them through resolution.
Partner with the broader Information Security team on investigations, security projects, and acquisition integration work as priorities require.
Follow Watts’ values, personnel policies, procedures, and process standards; maintain productive, collaborative relationships; and adhere to the company’s cultural beliefs.