Network Security Engineer

Global Payment Holding Company • Cincinnati, OH

3d • Hybrid

About The Position

Global Payments is hiring a Network Security Engineer for its Edge & Network Security team. This hybrid role is based in Cincinnati, Ohio, or Atlanta, Georgia, and requires working in the office three days per week. The position is not eligible for visa sponsorship; candidates must be U.S. citizens or Green Card holders.

The engineer will operate, strengthen, and improve web application firewall, edge security, and application protection platforms in a global enterprise environment. The hands-on work focuses on WAFs, application-layer controls, bot mitigation, API protection, and traffic inspection, using platforms such as Akamai and Cloudflare. Approximately 80% of the role is implementation, configuration, tuning, troubleshooting, and operational improvement, while approximately 20% supports incident mitigation and response.

The role includes a rotating on-call schedule for incidents affecting WAF, edge security, application protection, and related network security services. On-call hours rotate among four colleagues on weekdays from 10 a.m. to 10 p.m. ET and among seven colleagues on weekends from 10 p.m. Friday to 10 p.m. Sunday ET. The engineer will investigate and mitigate incidents, engage senior engineers and other teams as needed, contribute to post-incident reviews and corrective actions, and participate in readiness exercises, operational reviews, and resilience improvements.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information technology, networking, or a related field, or equivalent practical experience.
• 3–5 years of experience in network security, application security, edge security, security operations, infrastructure engineering, or a related role.
• Hands-on experience supporting WAF or application protection technologies, preferably Akamai, Cloudflare, or a comparable WAF/CDN platform.
• Experience with application onboarding, policy implementation, traffic analysis, rule tuning, exception handling, troubleshooting, and false-positive reduction.
• Working knowledge of TCP/IP, HTTP/S, TLS and certificates, DNS, proxies, load balancing, NAT, routing, and CDN or edge security concepts.
• Ability to analyze logs, HTTP transactions, application behavior, and security events to investigate and resolve technical issues.
• Strong problem-solving and communication skills, ability to work across distributed teams, follow change-management processes, and participate in a rotating on-call schedule.
• Must be a U.S. citizen or Green Card holder; visa sponsorship is not available.

Nice To Haves

• Experience with Akamai or Cloudflare application, API, or bot protection capabilities.
• Familiarity with Terraform, Python, REST APIs, Git, CI/CD pipelines, or other security automation tools.
• Experience with SIEM platforms, dashboards, alerts, or reporting for WAF and edge security events.
• Familiarity with the OWASP Top 10, API abuse, credential attacks, automated threats, or application-layer denial-of-service patterns.
• Exposure to SASE, secure web gateways, Zscaler, Prisma Access, Palo Alto, F5 Distributed Cloud, DDoS protection, or load-balancing technologies.
• Experience in a regulated or highly available enterprise environment.
• Relevant certification such as Security+, CCNA, Akamai, Cloudflare, GIAC, Palo Alto, or Zscaler.

Responsibilities

• Operate and continuously improve WAF and edge security platforms, focusing on application, API, and bot protection.
• Configure and tune Akamai, Cloudflare, or similar platforms, including WAF policies, managed and custom rules, rate limiting, bot controls, and security analytics.
• Onboard internet-facing applications and implement protections, exceptions, and allow/block controls.
• Analyze traffic, logs, and security events to identify threats, configuration issues, false positives, and opportunities to improve policies.
• Troubleshoot WAF blocks, application access, TLS and certificate, DNS, proxy, and other edge security issues.
• Implement and validate changes using established testing, peer-review, rollback, and change-management processes.
• Support incident response, maintain operational documentation and runbooks, and collaborate with application, security, network, infrastructure, and vendor teams.
• Participate in a rotating on-call schedule, perform initial investigation and mitigation, and contribute to post-incident reviews and corrective actions.
• Participate in readiness exercises, operational reviews, and resilience improvements for critical edge and application security services.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level