Lead Application Security Engineer

Saxon Global•Dallas, TX

About The Position

We are seeking a highly skilled and experienced Lead Application Security Engineer to join our team. This role requires a deep understanding of web application security, with a strong focus on Web Application Firewalls (WAF) and application layer (L7) security. The ideal candidate will have extensive hands-on experience in configuring, tuning, and monitoring WAF solutions, as well as a solid grasp of application layer DDoS attacks, DNS, global and local load balancing, bot management, and API security. You will be responsible for protecting our applications from various web attacks and implementing effective rate limiting policies. This position demands strong analytical and problem-solving abilities, excellent communication skills, and the capacity to collaborate effectively with both business and technical teams. The role also requires a self-starter attitude, adaptability, and the ability to excel in a dynamic environment.

Requirements

5+ years of professional experience in Web Application Firewall / Layer 7 security.
Deep hands-on experience with WAF configuration, tuning, and monitoring.
Experience with WAFs from vendors such as Imperva, ASM, Cloudflare, Akamai, F5 Advanced, FortiWeb, Barracuda.
Demonstrated knowledge of application layer (L7) DDoS attacks.
Strong understanding of DNS, A/CNAME records.
Strong understanding of global load balancing and local load balancing.
Experience with bot management and API security.
Must have experience with web attacks (how to protect) and rate limiting policies.
Strong analytical and problem-solving skills.
Excellent communication skills.
Ability to partner effectively with business and technical teams.
Self-starter, adaptable, and able to thrive in a fast-changing environment.