Cybersecurity Engineer - Web Application Firewall (open to remote)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Triumph Financial, Inc., so some details may not match this job. The employer's own page has the real description.

Job Overview

As a Cybersecurity Engineer specializing in Web Application Firewalls (WAF) at Triumph Financial, Inc., you will play a critical role in protecting the integrity, availability, and confidentiality of our web applications. You will design, implement, and maintain WAF solutions while collaborating with cross-functional teams to enhance our overall security posture. Your expertise will contribute to risk assessments, incident response, and adherence to compliance requirements, ensuring that our applications remain secure against evolving cyber threats.

Job Responsibilities

• Design and implement WAF policies that effectively filter and monitor HTTP traffic to and from a web application.
• Analyze and tune WAF rules to ensure minimal false-positive rates while maximizing security defenses.
• Conduct regular vulnerability assessments and penetration tests on web applications.
• Collaborate with development teams to ensure secure coding practices are followed during the software development lifecycle.
• Respond to security incidents involving web applications, conducting root cause analysis, and implementing corrective actions.
• Stay abreast of emerging cybersecurity threats and trends, incorporating the latest security measures into existing systems.
• Prepare and maintain documentation related to security controls, configurations, and compliance efforts.
• Provide training and guidance to team members on WAF best practices and security tools.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in cybersecurity, with a focus on web application firewalls.
• Proficient in firewall configuration and management, especially with WAF technologies.
• Strong understanding of web application security vulnerabilities (e.g., OWASP Top Ten).
• Familiarity with security frameworks and compliance standards (e.g., NIST, ISO 27001, PCI-DSS).
• Hands-on experience with common security tools and technologies, including SIEM, IDS/IPS, and vulnerability scanners.
• Excellent problem-solving skills and the ability to work under pressure.
• Strong verbal and written communication skills, with the ability to convey technical information to non-technical stakeholders.

Technologies & Tools

In this role, the Cybersecurity Engineer will utilize a variety of technologies and tools to effectively manage and monitor web application security. Key tools include Web Application Firewalls (WAF) such as AWS WAF, Cloudflare, or similar platforms; security information and event management (SIEM) solutions like Splunk or ELK Stack; intrusion detection and prevention systems (IDS/IPS); and vulnerability assessment tools like Qualys or Nessus. Familiarity with scripting languages such as Python or PowerShell may also be beneficial for automating security processes and analyses.

Ideal Candidates

The ideal candidate for the Cybersecurity Engineer position will possess a proactive mindset and a deep commitment to cybersecurity excellence. They should be detail-oriented, possessing strong analytical skills to identify and mitigate risks effectively. A collaborative spirit is essential, as this role requires constant communication with various teams to ensure comprehensive security measures are in place. The candidate should also demonstrate a strong passion for staying current with cybersecurity trends and sharing their knowledge with others, fostering a culture of security awareness within the organization.