Application Security Engineer

Application Security Engineer (WAF)

Location: Charlotte, NC (Uptown)

Schedule: Hybrid – 3 days onsite

Duration: 12-Month Contract with strong potential for extension or conversion

Overview

We are seeking a WAF & Application Security Engineer to help support and enhance critical web application security controls within a large enterprise environment. This individual will partner closely with Cyber Security, Infrastructure, Application Development, and Operations teams to deploy, maintain, monitor, and optimize technologies that protect customer-facing applications and digital services.

This role offers the opportunity to work with enterprise-scale web security platforms while contributing to strategic security initiatives and modernization efforts.

Key Responsibilities

• Administer, monitor, troubleshoot, and optimize enterprise Web Application Firewall (WAF) platforms and related application security technologies
• Support day-to-day operations, policy management, incident response, and health monitoring across web security environments
• Participate in the design, implementation, and enhancement of application security controls and security infrastructure projects
• Analyze traffic patterns, application behavior, and security events to identify risks and recommend improvements
• Perform root cause analysis and advanced troubleshooting using packet captures, logs, CLI tools, and network diagnostics
• Collaborate with development and infrastructure teams to implement secure application protection strategies
• Conduct regular platform health checks, audits, and configuration reviews
• Create and maintain operational documentation, architecture diagrams, standards, and procedures
• Participate in on-call support and incident response activities as needed

Required Qualifications

• 3+ years of experience supporting Web Application Firewalls, application security technologies, or related network security platforms
• Experience with one or more of the following technologies:
• Akamai Kona
• F5 ASM / Advanced WAF
• Cloudflare WAF
• Imperva WAF
• AWS WAF
• Azure Application Gateway WAF
• Fastly Next-Gen WAF (Signal Sciences)
• Radware AppWall
• Similar enterprise web security solutions
• Strong understanding of Layer 7 security concepts, OWASP Top 10, web application attacks, and application protection strategies
• Experience troubleshooting network and application security issues using packet captures, logs, and diagnostic tools
• Working knowledge of HTTP/S, TLS, TCP/IP, DNS, APIs, and modern web architectures
• Ability to work cross-functionally with application development, infrastructure, and security teams
• Strong verbal and written communication skills

Preferred Qualifications

• Experience with API security technologies such as Salt Security, Noname Security, Akamai API Security, or similar platforms
• Scripting or automation experience using Python, PowerShell, Bash, or related technologies
• Experience supporting load balancing, CDN, edge security, or reverse proxy technologies
• Familiarity with SIEM, SOAR, and security monitoring platforms
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field

Why Consider This Opportunity

• Enterprise-scale environment supporting highly visible digital platforms
• Opportunity to work with leading-edge web security and application protection technologies
• Strong potential for long-term extension or conversion
• Collaborative cybersecurity team with exposure to broader security engineering initiatives