Web Application Firewall (WAF) Support Specialist

Sentar•Charleston, SC

11d

About The Position

Sentar is seeking a Web Application Firewall (WAF) Support Specialist in Charleston, South Carolina. The role manages and evolves application-layer security controls using F5 Application Security Manager (ASM) in support of Department of Defense cybersecurity initiatives. The specialist supports WAF policy tuning, site-specific request handling, and enforcement of application security controls across globally dispersed defense networks. The position contributes to incident response and coordinates with Cloud, Gateway, and Site Teams to maintain effective web protection strategies.

Requirements

Secret clearance, with an upgrade to TS/SCI required.
Bachelor's degree and at least 6 years of overall technical experience, or 10 years of overall technical experience without a degree.
DoD 8570 IAT Level II certification.
GCIH, CEH, or CySA+ certification.
Experience with firewalls.
Experience monitoring network traffic.
Understanding of the OWASP Top 10, HTTP/HTTPS protocols, and common web exploits.
Familiarity with incident response workflows and cyber threat mitigation.
Experience supporting DoD cybersecurity or network defense environments.
Experience with management of controls and/or application security.

Nice To Haves

1–2 years of incident response or threat-hunting experience in enterprise or DoD settings.
Experience with F5 firewalls.
Strong verbal and written communication skills for customer interactions and technical documentation.
Understanding of network-level protocol analysis and secure web architecture.
Prior experience supporting remote site deployments or global operations.

Responsibilities

Issue Firewall Acceptances based on customer requests.
Develop, tune, and maintain WAF policies using F5 ASM.
Coordinate deployments and policy changes with cloud architects and local site engineers.
Proactively tune policies based on learning-mode analysis and stakeholder feedback.
Fulfill block and unblock requests and provide technical justification for negative determinations.
Collaborate with subscriber sites to validate false positives and refine rule sets.
Support secure onboarding of new applications into protected environments.
Participate in incident response surges and assist threat-hunting efforts.
Align policy updates with adversary tactics, techniques, and procedures (TTPs) and emerging vulnerability trends.
Provide input to detection engineering and mitigation teams.

Benefits

Voluntary medical, dental, and vision insurance, with Health Savings Account or Flexible Spending Account options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life insurance and short- and long-term disability coverage for qualifying employees.
401(k) match.
PTO plan that increases quickly with years of service.
Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
Mental health awareness programs.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.
Employee ownership.