Lead Application Security Engineer

Saxon Global • Dallas, NC

4d

About The Position

This role focuses on Web Application Firewall (WAF) and Layer 7 security. The Lead Application Security Engineer will be responsible for configuring, tuning, and monitoring WAFs, as well as implementing bot mitigation strategies, API security, and rate limiting. The position also involves managing DNS and load balancing for high-availability applications, applying security controls to protect web applications, and ensuring regulatory compliance.

Requirements

• 5+ years of professional experience in Web Application Firewall (WAF)/ Layer 7 security.
• Deep hands-on experience with WAF configuration, tuning, and monitoring.
• Experience with WAFs from vendors such as Imperva, ASM, Cloudflare, Akamai, F5 Advanced, FortiWeb, Barracuda.
• Demonstrated knowledge of application layer (L7) DDoS attacks.
• Experience with web attacks (how to protect) and rate limiting policies.
• Experience implementing bot mitigation strategies, API security, and rate limiting for application traffic.
• Experience configuring and managing DNS (A records, CNAME records), global and local load balancing for high-availability applications.
• Experience with WAF, Layer 7 (L7) DDoS mitigation, web application attack protection, and vulnerability management.
• Experience with tools: Imperva, ASM, Cloudflare, Akamai, F5 Advanced, FortiWeb, Barracuda.
• Experience applying security controls to safeguard web applications, ensure regulatory compliance, and maintain operational integrity.

Nice To Haves

• Network (L3) DDoS is not required.

Responsibilities

• Configure, tune, and monitor Web Application Firewalls (WAFs).
• Implement bot mitigation strategies, API security, and rate limiting for application traffic.
• Configure and manage DNS (A records, CNAME records) and global/local load balancing for high-availability applications.
• Provide experience with WAF, Layer 7 (L7) DDoS mitigation, web application attack protection, and vulnerability management.
• Apply security controls to safeguard web applications, ensure regulatory compliance, and maintain operational integrity.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed