Lead Information Security Engineer, Web Application Security

What you'll do

• Provide security consulting on large projects to ensure conformity with corporate policies and standards.
• Design, document, test, and maintain complex security solutions for networking, cloud, and authentication.
• Review and correlate security logs to identify potential threats or system issues.
• Identify security vulnerabilities, perform risk assessments, and evaluate remediation alternatives.
• Implement security components including threat modeling, incident response, and access management.
• Create engineering documentation and provide support for application IDs and change creations.
• Provide audit and control support for technologies within the inbound web application security space.

What we're looking for

• 5+ years of Information Security Engineering experience.
• 5+ years of experience in an enterprise environment.
• Layer 7 web security experience including Bot, API, L7 DDoS, and WAF (preferred).
• Advanced knowledge of HTTP/S (preferred).
• ServiceNow experience (preferred).
• Experience with vendors such as Akamai and/or Cloudflare and CDN experience (preferred).
• Familiarity with DNS and Load Balancing (preferred).
• Technical documentation experience, Jira, Confluence, and strategic planning experience (preferred).