Senior Cybersecurity Engineer - Web Application & Network Protection

Senior Cybersecurity Engineer - Web Application & Network Security

Location: Columbus, OH (Hybrid - Tuesday through Thursday onsite, Monday and Friday remote)

Position Type: Contract

Position Summary

We are seeking an experienced Senior Cybersecurity Engineer to lead the design, implementation, and support of enterprise web application and network security solutions. This role is responsible for securing internet-facing applications using F5 Distributed Cloud (XC) WAF while supporting enterprise network security through Palo Alto firewalls, Prisma Access, VPN technologies, and cloud security automation.

The ideal candidate combines expertise in application security, network security, and cloud security with a passion for protecting critical enterprise services.

Key Responsibilities

• Administer and support F5 Distributed Cloud (XC) WAF
• Deploy and optimize WAF policies, signatures, and security controls
• Configure API Protection, Bot Defense, DDoS mitigation, geolocation policies, rate limiting, and CAPTCHA challenges
• Investigate and tune WAF false positives
• Onboard applications into enterprise WAF services
• Support web application incident response and attack investigations
• Secure applications against OWASP Top 10 vulnerabilities
• Partner with development teams on secure application architecture
• Administer Palo Alto NGFW, Prisma Access, VPNs, SSL decryption, NAT, and segmentation
• Troubleshoot DNS, routing, and production network security issues
• Develop automation using Python, REST APIs, Terraform, and Git
• Build dashboards and reporting for security posture
• Participate in incident response, threat hunting, vulnerability remediation, and architecture reviews

Required Qualifications

• Experience administering F5 Distributed Cloud (XC) WAF or enterprise WAF platforms
• Strong knowledge of web application security concepts
• Experience with Palo Alto Networks firewalls
• Knowledge of API security and OWASP Top 10
• Experience supporting enterprise network security
• Familiarity with Python scripting and automation
• Experience with Terraform and REST APIs
• Strong troubleshooting and communication skills

Preferred Qualifications

• Bot Management and DDoS Protection experience
• CDN technologies
• DevSecOps and CI/CD pipeline security
• Kubernetes and container security
• Cloud security experience
• F5, Palo Alto, CISSP, GIAC, or OWASP certifications