We are looking for a web security engineer to support and Provide technical expertise for securing internet-facing applications and services. The role focuses on protecting web applications, APIs, and digital channels against cyber threats while supporting business projects and operational security activities.Tasks

Design, implement, and maintain web security controls
Manage and optimize Web Application Firewall (WAF) policies
Investigate and mitigate web-based attacks (e.g. OWASP Top 10, bot attacks, DDoS, credential stuffing, scraping)
Analyze security events related to websites, APIs, and customer-facing services
Perform security reviews of web application architectures and proposed changes
Support onboarding and configuration of CDN and security services
Develop and improve security rules, detection logic, and automated protections
Work with application teams to remediate identified vulnerabilities
Conduct security assessments and provide recommendations for risk reduction
Support incident response activities for web security incidentsRequirements
At least 3+ years of experience as a Web Security Engineer
Strong understanding of web application security concepts
Web Application Firewalls (WAF)
CDN platforms (Cloudflare, Akamai or similar)
API security
HTTP/HTTPS protocols
Good understanding of networking fundamentals
TCP/IP
DNS
Load balancing
Reverse proxies
Experience analyzing web attack patterns and security logs
Knowledge of OWASP Top 10 and secure development principles
Ability to troubleshoot complex web security issues Nice to Have
Cloudflare Enterprise
Terraform / Infrastructure as Code
Azure DevOps or CI/CD
Python, PowerShell, or Bash scriptingWorking Model
Standard business hours
On-call participation required for critical incidents and platform disruption

We are looking for a web security engineer to support and Provide technical expertise for securing internet-facing applications and services. The role focuses on protecting web applications, APIs, and digital channels against cyber threats while supporting business projects and operational security activities.Tasks

Design, implement, and maintain web security controls
Manage and optimize Web Application Firewall (WAF) policies
Investigate and mitigate web-based attacks (e.g. OWASP Top 10, bot attacks, DDoS, credential stuffing, scraping)
Analyze security events related to websites, APIs, and customer-facing services
Perform security reviews of web application architectures and proposed changes
Support onboarding and configuration of CDN and security services
Develop and improve security rules, detection logic, and automated protections
Work with application teams to remediate identified vulnerabilities
Conduct security assessments and provide recommendations for risk reduction
Support incident response activities for web security incidentsRequirements
At least 3+ years of experience as a Web Security Engineer
Strong understanding of web application security concepts
Web Application Firewalls (WAF)
CDN platforms (Cloudflare, Akamai or similar)
API security
HTTP/HTTPS protocols
Good understanding of networking fundamentals
TCP/IP
DNS
Load balancing
Reverse proxies
Experience analyzing web attack patterns and security logs
Knowledge of OWASP Top 10 and secure development principles
Ability to troubleshoot complex web security issues Nice to Have
Cloudflare Enterprise
Terraform / Infrastructure as Code
Azure DevOps or CI/CD
Python, PowerShell, or Bash scriptingWorking Model
Standard business hours
On-call participation required for critical incidents and platform disruption