Network Security Engineer

Worldpay•Cincinnati, OH

8d•Hybrid

About The Position

This position is hybrid, requiring 3 days per week in our Cincinnati, OH office. The role is within the ever-evolving Edge & Network Security team, focusing on operating, strengthening, and continuously improving web application firewall, edge security, and application protection platforms across a global enterprise environment. This is a hands-on engineering role primarily focused on web application firewalls, edge security, application-layer controls, bot mitigation, API protection, and traffic inspection. Core platforms include Akamai and Cloudflare technologies, such as WAF policies, managed and custom rules, bot protection, rate limiting, API security, security analytics, and edge traffic protection. The engineer will support business-critical applications and services, onboard applications, implement and tune security controls, investigate false positives, troubleshoot application access issues, and improve the reliability and effectiveness of security services. Approximately 80% of the time is dedicated to implementation, configuration, tuning, troubleshooting, and operational improvement, with 20% supporting incident mitigation and response. The role also includes participation in a rotating on-call schedule for incidents affecting WAF, edge security, application protection, or related network security services, involving initial investigation, mitigation, engaging senior engineers, and contributing to post-incident reviews and corrective actions.

Requirements

Bachelor’s degree in cybersecurity, computer science, information technology, networking, or a related field—or equivalent practical experience.
3–5 years of experience in network security, application security, edge security, security operations, infrastructure engineering, or a related role.
Hands-on experience supporting WAF or application protection technologies, preferably Akamai, Cloudflare, or a comparable WAF/CDN platform.
Experience with application onboarding, policy implementation, traffic analysis, rule tuning, exception handling, troubleshooting, and false-positive reduction.
Working knowledge of TCP/IP, HTTP/S, TLS and certificates, DNS, proxies, load balancing, NAT, routing, and CDN or edge security concepts.
Ability to analyze logs, HTTP transactions, application behavior, and security events to investigate and resolve technical issues.
Strong problem-solving and communication skills.
Ability to work across distributed teams.
Ability to follow change-management processes.
Ability to participate in a rotating on-call schedule.
Must be a US Citizen or Green Card Holder.

Nice To Haves

Experience with Akamai or Cloudflare application, API, or bot protection capabilities.
Familiarity with Terraform, Python, REST APIs, Git, CI/CD pipelines, or other security automation tools.
Experience with SIEM platforms, dashboards, alerts, or reporting for WAF and edge security events.
Familiarity with the OWASP Top 10, API abuse, credential attacks, automated threats, or application-layer denial-of-service patterns.
Exposure to SASE, secure web gateways, Zscaler, Prisma Access, Palo Alto, F5 Distributed Cloud, DDoS protection, or load-balancing technologies.
Experience in a regulated or highly available enterprise environment.
Relevant certification such as Security+, CCNA, Akamai, Cloudflare, GIAC, Palo Alto, or Zscaler.

Responsibilities

Support the operation and continuous improvement of WAF and edge security platforms, with a focus on application, API, and bot protection.
Configure and tune Akamai, Cloudflare, or similar platforms, including WAF policies, managed and custom rules, rate limiting, bot controls, and security analytics.
Onboard internet-facing applications and implement appropriate protections, exceptions, and allow/block controls.
Analyze traffic, logs, and security events to identify threats, configuration issues, false positives, and policy improvement opportunities.
Troubleshoot WAF blocks, application access, TLS/certificate, DNS, proxy, and other edge security issues.
Implement and validate changes using established testing, peer-review, rollback, and change-management processes.
Support incident response, maintain operational documentation and runbooks, and collaborate with application, security, network, infrastructure, and vendor teams.
Participate in a rotating on-call schedule for incidents affecting WAF, edge security, application protection, or related network security services.
Perform initial investigation and mitigation during on-call shifts.
Engage senior engineers and other support teams when needed during on-call shifts.
Contribute to post-incident reviews and corrective actions.
Participate in readiness exercises, operational reviews, and resilience improvements for critical edge and application security services.