Lead Cybersecurity WAF Engineer - Forest Park - Cox Automotive

    Cox Automotive
    Cox Automotive Forest Park

    1 day ago

    Full time
    Description
    The Lead Cybersecurity Web Application Firewall (WAF) Engineer is the enterprise's foremost expert and strategic owner of WAF and application-edge security. This role sets the vision, strategy, and standards that govern how public-facing applications are protected across Cox Automotive.

    The Lead Engineer drives the architecture of WAF implementations, leads complex threat response efforts, advances automation and logging capabilities, and partners with cross-functional engineering, cybersecurity, and business teams to ensure resilient, scalable, and modern WAF protections. Main responsibilities are tuning and improving security policies, implementing the WAF for new public websites based on established architecture patterns, and participating in security events to use the WAF as a protective and defensive measure against threat actors.

    This role will use their technical knowledge in implementing and using a web application firewall as a protective and defensive cybersecurity control. They will use their experience with networking concepts such as DNS, HTTP/S, and edge services to route website traffic, understand how web applications and mobile applications are designed to use client-server communication, and must be able to partner with cross-functional teams throughout the organization.

    This role will report directly to the Senior Manager of Application Security at Cox Automotive.

    What You'll Do:
    • Own and champion the enterprise WAF, shaping its strategy, patterns, and standards in partnership with the architecture team. We're looking for someone who lives and breathes WAF and can elevate security for all public-facing sites and APIs.
    • Analyze WAF rules to identify improvements and explain recommended changes to improve the protections the WAF provides.
    • Collaborating with security architecture on long-term WAF strategy, including technology standards, architectural patterns, and security roadmaps.
    • Author and maintain runbooks, playbooks, and threat specific WAF tuning strategies. Lead the creation and continuous improvement of runbooks, playbooks, and automated detection/triggers.
    • Perform cyber engineering trend analysis and reporting, defining and recommending tool, infrastructure and other improvements.
    • Proposes and helps review plans and policies to improve the overall security environment.
    • Participate in security events and incident response (e.g., botnet traffic spikes, Layer 7 attacks) to identify gaps in current design and propose solutions to prevent threats from reoccurring.
    • Research and evaluate emerging security trends, threats, and technologies, and recommend appropriate solutions and enhancements.
    • Partnering closely with AppSec, Cyber Defense, and Engineering teams for secure-by-default adoption.
    Who Are You:

    Minimum Qualifications
    • Bachelor's degree in a related discipline and 6 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 4 years' experience; a Ph.D. and 1 year of experience; or 18 years' experience in a related field
    • At least 4 years focused on cybersecurity with at least 2 years managing enterprise WAF.
    • Demonstrated expert level experience architecting, implementing, and operating enterprise WAF solutions across multiple environments.
    • Must have deep knowledge of how network traffic routes between clients and servers across the internet (e.g., DNS, HTTP/S, CDN/edge routing).
    • Clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders.
    • Proven experience leading technical initiatives and mentoring engineering teams.
    • Excellent customer service skills, writing, and presentation skills.
    • Develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices.
    • Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership.
    • Proficient in Python and Terraform.
    • Creatively solving complex cybersecurity challenges while exhibiting solid, pragmatic business acumen.
    • Experience utilizing Agile methodologies and DevSecOps.
    • Initiating change and deploying solutions in Fortune 1000 companies.
    • Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA).
    Preferred Qualifications
    • Knowledge of current cybersecurity and technology architectures such as zero trust, IaaS, PaaS, SaaS, virtualization, and containerization.
    • A strong understanding of cloud containers and/or serverless platforms (e.g., EKS, ECS, Lambda, Fargate).
    • Experience with security testing tools such as Fortify, BurpSuite, and Wiz.
    • Extensive technology knowledge and recognized expertise in several areas including .NET framework, Mono, Spring frameworks, Oracle, serverless, cloud patterns, cloud service and user authentication or similar.
    • Experience with cloud infrastructure (AWS, GCP, or Azure) and services and on-premises infrastructure.
    • Experience in the development and design of cybersecurity standard methodologies to all layers of the hosting and application stack in both cloud and on-premises environments.
    • Knowledge of Identity and Access Management (IAM), cryptography / key management, secrets management, access controls and security protocols (e.g., multi-factor, SAML, OAuth, OIDC).
    • Experience with firewall, web application firewalls, and other edge services as well as deep understanding of DMZ and other network architectures.
    • AWS Well-Architected Framework.
    • Experience in national critical infrastructure industries (telecommunications, financial services, defense, government, etc.).
    • Big four consulting or Fortune 500 company experience.
    • Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA).
    USD 122, ,400.00 per year

    Compensation:

    Compensation includes a base salary of $122, $204, The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.

    Benefits:

    The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

  • Sr. Software Engineer - WAF RP1008141

    3 days ago

    Only for registered members Elliott Ave W, Seattle, WA , USA

    We are looking for a Lead designer, responsible for the design, development and implementation of high-speed data-plane WAF engine (the core of the WAF) integrated in public and private cloud architecture. · We are looking for a Lead designer, responsible for the design, developm ...

  • AWS Cloud Security Engineer

    1 week ago

    Only for registered members Mountlake Terrace

    We are seeking a Cloud Security Engineer to help secure client cloud environment.The ideal candidate will have experience with AWS security engineering and be able to work in a fast-paced environment. · ...

  • Senior Security Platform Engineer

    2 weeks ago

    Only for registered members Seattle, WA

    We are looking for a skilled and innovative Senior Security Platform Engineer to join our Product Security Engineering team at Adobe. · Bridge the Visibility Gap: Act as the platform detective to identify when security data is incomplete. · Automation and DevSecOps: Write product ...

  • Azure Site Reliability Engineer

    1 month ago

    Only for registered members Mukilteo, WA

    We are seeking a highly skilled and motivated Site Reliability Engineer to join our team. The ideal candidate will be responsible for implementing and managing the overall cloud strategy. · KEY RESPONSIBILITIES:Review, design, and implement solutions to the overall cloud strategy ...

  • Solutions Architect

    3 weeks ago

    Only for registered members Seattle, WA

    · This is a senior-level Solutions Architect position that requires leading end-to-end product development. · ...

  • Sr Applied AI/ML Engineer, Product Security Engineering

    1 month ago

    Only for registered members Seattle, WA

    We are on the lookout for a proficient and forward-thinking Machine Learning Engineer to join our Product Security Engineering organization.This role offers the opportunity to create, innovate, and implement machine learning models and analytical systems that enhance our Web Appl ...

  • Solutions Architect/Technical Strategy Lead

    3 weeks ago

    Only for registered members Seattle $212,202 - $220,000 (USD)

    The Solutions Architect/Technical Strategy Lead will lead end-to-end product development and client communication to define business requirements and workflows. · Decompose high-level requirements into technical tasks and system designs. · Ensure seamless integration and scalabil ...

  • Cloud Devops Engineer/ Architect

    1 week ago

    Only for registered members Bellevue

    Should be strong in AWS, Linux, Cloud formation. Hands on experience in configuring and maintaining Amazon Web Services which include services like Amazon EC2, VPC. · Focused on DevOps, Cloud Computing,Proficient in IT environment with a focus on DevOps and Automation projectsCer ...

  • Solutions Architect

    3 weeks ago

    Only for registered members Seattle $213,000 - $220,000 (USD)

    Lead end-to-end product development, including client communication to gather and document business requirements and workflows. · ...

  • Platform Engineer

    2 weeks ago

    Only for registered members Seattle $61.35 - $81.52 (USD)

    The Senior Azure Architect will serve as a subject matter expert and help drive the long-term strategy for the Cloud Platforms team. · ...

  • Senior DevOps Engineer

    3 days ago

    Only for registered members Seattle, WA, United States

    Tennis Channel is rebuilding its digital experience from the ground up - mobile apps, TV apps, content management, analytics, monitoring and video delivery using AWS as core cloud platform. · We are looking for Senior DevOps Engineer who will own our AWS environment end-to-end: i ...

  • Sr. Consultant

    1 week ago

    Only for registered members Seattle Full time $155,771 - $172,800 (USD)

    F5 seeks Sr. Consultant in Seattle to define security solutions for clients based on unique business needs. · ...

  • Software Developer 4

    1 week ago

    Only for registered members Seattle Full time

    Join Oracle as we drive innovation in enterprise security and AI. We're seeking an experienced Senior Principal AI/ML Software Engineer with a strong background in Oracle Identity Management (Oracle IDM suite, IDCS) and deep expertise in AI/ML technologies. · We'll leverage your ...

  • Professional Services III - AMZ7156.16

    1 month ago

    Only for registered members Seattle Full time $153,600 - $207,800 (USD)

    The job is for Professional Services III at Amazon Web Services in Seattle. The candidate must have experience in software engineering and gather requirements. They will work on designing and developing software applications. · ...

  • Professional Services III - AMZ7156.16

    1 month ago

    Only for registered members Seattle $153,600 - $207,800 (USD)

    Architect and implement infrastructure and automation by leveraging insights from machine learning, data mining, usability studies, and customer feedback to enhance security and compliance in cloud applications. · ...

  • cybersecurity engineer senior, CSOC

    1 month ago

    Only for registered members Seattle, WA Remote job

    This position contributes to Starbucks success by utilizing a variety of tools to investigate alerts and indicators of compromise review log data and assess operational health for the Starbucks Security platforms You should have strong problem solving skills excellent communicati ...

  • Senior Software Engineer, Security Products

    1 month ago

    Only for registered members Seattle Full time $133,680 - $167,100 (USD)

    +Job Summary · We are seeking a highly experienced and motivated Senior Software Engineer to join our Security Products team. · Designing building maintaining robust security products infrastructure protecting Digital Ocean's platform customers' data, · +ResponsibilitiesDesign de ...

  • Senior Software Engineer, Security Products

    1 month ago

    Only for registered members Seattle $133,680 - $167,100 (USD)

    We are seeking a highly experienced and motivated Senior Software Engineer to join our Security Products team.In this pivotal role you will be instrumental in designing building maintaining robust security products infrastructure that protect Digital Ocean's platform our customer ...

  • Security Engineering Technical Lead Manager

    4 days ago

    Only for registered members Seattle, Washington

    Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer,get crucial goods where they need to go,and make mobility more efficient and accessible for all. · We are seeking an experienced and highly ...

  • Senior Software Engineer, Security Products

    1 day ago

    Only for registered members Seattle $140,800 - $176,000 (USD)

    We are looking for a Senior Software Engineer who is passionate about startups fueling the next wave of AI innovation. · Design and develop real-time security detection engines using Apache Flink and Kafka for threat detection at cloud scale · Build high-performance security APIs ...

Jobs
>
Lead cybersecurity waf engineer
>
Jobs for Lead cybersecurity waf engineer in Lake Forest Park