Application Security Engineer

Application Security Engineer (WAF)

Location: Charlotte, NC (Uptown)

Schedule: Hybrid – 3 days onsite

Duration: 12-Month Contract with strong potential for extension or conversion

Overview

We are seeking a WAF & Application Security Engineer to help support and enhance critical web application security controls within a large enterprise environment. This individual will partner closely with Cyber Security, Infrastructure, Application Development, and Operations teams to deploy, maintain, monitor, and optimize technologies that protect customer-facing applications and digital services.

This role offers the opportunity to work with enterprise-scale web security platforms while contributing to strategic security initiatives and modernization efforts.

Key Responsibilities

• Administer, monitor, troubleshoot, and optimize enterprise Web Application Firewall (WAF) platforms and related application security technologies

• Support day-to-day operations, policy management, incident response, and health monitoring across web security environments

• Participate in the design, implementation, and enhancement of application security controls and security infrastructure projects

• Analyze traffic patterns, application behavior, and security events to identify risks and recommend improvements

• Perform root cause analysis and advanced troubleshooting using packet captures, logs, CLI tools, and network diagnostics

• Collaborate with development and infrastructure teams to implement secure application protection strategies

• Conduct regular platform health checks, audits, and configuration reviews

• Create and maintain operational documentation, architecture diagrams, standards, and procedures

• Participate in on-call support and incident response activities as needed

Required Qualifications

• 3+ years of experience supporting Web Application Firewalls, application security technologies, or related network security platforms

• Experience with one or more of the following technologies:

• Akamai Kona
• F5 ASM / Advanced WAF
• Cloudflare WAF
• Imperva WAF
• AWS WAF
• Azure Application Gateway WAF
• Fastly Next-Gen WAF (Signal Sciences)
• Radware AppWall
• Similar enterprise web security solutions

• Strong understanding of Layer 7 security concepts, OWASP Top 10, web application attacks, and application protection strategies

• Experience troubleshooting network and application security issues using packet captures, logs, and diagnostic tools

• Working knowledge of HTTP/S, TLS, TCP/IP, DNS, APIs, and modern web architectures

• Ability to work cross-functionally with application development, infrastructure, and security teams

• Strong verbal and written communication skills

Preferred Qualifications

• Experience with API security technologies such as Salt Security, Noname Security, Akamai API Security, or similar platforms

• Scripting or automation experience using Python, PowerShell, Bash, or related technologies

• Experience supporting load balancing, CDN, edge security, or reverse proxy technologies

• Familiarity with SIEM, SOAR, and security monitoring platforms

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field

Why Consider This Opportunity

• Enterprise-scale environment supporting highly visible digital platforms

• Opportunity to work with leading-edge web security and application protection technologies

• Strong potential for long-term extension or conversion

• Collaborative cybersecurity team with exposure to broader security engineering initiatives