Jobs in the United States

25+ jobs

Save this search

Added 4 mins ago
RU
Application Engineer III
Randstad USA
Millstone Township, NJ
- $100,000 to $140,000 USD / year
Our client is seeking an experienced Application Engineer III based on-site in Millstone Township, NJ. In this vital role, you will architect enterprise-scale physical security…
Added 6 mins ago
W
Software engineer, generative AI
WRITER
San Francisco, CA · Seattle, WA · New York City, NY
- $146,000 to $240,000 USD / year
…enterprises to safely adopt superintelligence. As a software engineer, generative ai at WRITER, you'll be at the forefront of expanding human capacity by building the secure, scalable…
Added 6 mins ago
W
Software engineer, connectors & MCP
WRITER
San Francisco, CA · Seattle, WA · New York City, NY
- $146,000 to $240,000 USD / year
- Set technical direction for identity, auth, and trust boundaries across integrations (OAuth, API key, service-to-service), balancing developer velocity with security and compliance.
Added 7 mins ago
Senior Software Engineer (Backend), Retail & Marcom Engineering
Apple
Sunnyvale, CA
As a Software Engineer on the Carrier Services team, you'll build and support the backend services that power device activation and carrier experiences across Apple's online and retail…
Added 7 mins ago
Senior CyberArk PAM Engineer
The Northern Trust Company
Tempe, AZ
In this senior technical role, you’ll be responsible for the stability, security, and performance of the CyberArk platform, acting as a senior escalation point for complex issues and…
Added 7 mins ago
O
Staff Backend Engineer, Financial Engineering
OpenAI
San Francisco, CA
- $266,000 to $445,000 USD / year
Financial Engineering (FinEng) builds the financial systems behind ChatGPT, Codex, and OpenAI’s API platform. These products serve people, developers, and businesses around the world. We…
Added 12 mins ago
Staff Endpoint Engineer
SmithRx
Plano, TX
SmithRx is seeking a visionary and highly strategic Staff Endpoint Engineer to serve as the overarching technical authority and architect for our enterprise endpoint infrastructure, vendor…
Added 20 mins ago
TB
Data & Platform Engineer
Truist Bank
Richmond, VA · Atlanta, GA · Charlotte, NC
- $105,040 to $130,030 USD / year
The engineer combines strong expertise in SQL Server, Oracle, database performance tuning, data modeling, ETL/ELT development, API integration, and AWS data services to build and support…
Added 20 mins ago
TB
.Net Software Engineer
Truist Bank
Richmond, VA · Atlanta, GA · Charlotte, NC
- $105,040 to $131,300 USD / year
The engineer combines strong expertise in .NET/C#, SQL Server, Node.js, Angular, REST APIs, and AWS services to build new capabilities, enhance existing applications, and enable seamless…
Added 24 mins ago
Principal Software Development Engineer in Test
SAIC
Remote, United States
SAIC is seeking a Principal Software Development Engineer in Test (SDET) to join the Joint Range Extension (JRE) software development team.
Added 26 mins ago
Lead Backend Engineer
Wawa Inc. (210515330)
United States
Job Summary: The Lead Backend Engineer will build the next generation technologies that handle increasing amounts of information at a massive scale in real-time. The Lead Backend Engineer…
Added 26 mins ago
Senior Java Engineer, Vice President
Citibank, N.A.
United States
Strong understanding of API design, application security, and authentication and authorization frameworks, with a commitment to secure software development practices.
Added 38 mins ago
Full Stack Software Engineer (2 days telework/week, TS/SCI with Polygraph required)
Red Alpha
Annapolis Junction, MD
We're seeking an experienced Full Stack Software Engineer to support a Customer Service Request Portal (CSRP). In this role, you will collaborate with a team to develop and maintain backend…
Added 40 mins ago
S
Staff Perimeter Defense Engineer
SSB&T
Boston, MA · Princeton, NJ · Clifton, NJ · Austin, TX
- $120,000 to $202,500 USD / year
We are looking for a Staff Perimeter Defense Engineer reporting into the Defensive Engineering leadership team within Global Cyber Security (GCS). You will lead the strategy, architecture,…
Added 50 mins ago
Cyber Security Operations Center Analyst / AI-Automation Engineer
Micron Technology, Inc.
Boise, ID
…PowerShell, REST APIs, SOAR, and workflow platforms that connect security tools, telemetry sources, and case-management systems. Engineer them to production standard, with error handling,…
Added 58 mins ago
RH
Sr Application Engineer
Robert Half
Bethesda, MD
- $80 to $124 USD / hour
Sr. Application Engineer / Solutions Architect
Added 58 mins ago
RH
Integration Engineer
Robert Half
Bethesda, MD
- $80 to $124 USD / hour
Seeking an experienced Integration Engineer to design, build, deploy, and support enterprise integrations, APIs, connectors, workflows, and MCP servers/tools. This hands-on role owns…
Added 59 mins ago
CO
Enterprise Data Manager
County of Orange
Santa Ana, CA
- $60.69 to $94.08 USD / hour
Added 1 hour ago
ETL Engineer / Data Scientist (TS/SCI)
Vantor Services Inc.
Herndon, VA
Vantor is seeking an ETL Engineer / Data Scientist to develop and maintain data pipelines that support mission applications, analytics, and data science workflows. The successful candidate…
Added 1 hour ago
RU
Sr Python DevOps Engineer 49045
Randstad USA
Remote, United States
- $75 to $90 USD / hour
Design and maintain CI/CD pipelines in Jenkins and GitLab with automated unit, integration, and functional testing, code quality gates, and security scanning.
Added 1 hour ago
JH
Full Stack Software Engineer - Advanced Visualizations
Johns Hopkins Applied Physics Laboratory
Laurel, MD
- $100,000 USD / year
Are you passionate about building solutions for our greatest national security challenges?
Added 1 hour ago
WD
Principal Data Engineer
Walt Disney Attractions Technology LLC
Orlando, FL
- $159,800 to $214,200 USD / year
Architect, build, and scale full stack data applications: UI, API, & AI
Added 1 hour ago
AI Solutions Engineer
UWMSN University of Wisconsin Madison
Remote, United States
…Information Technology is seeking a highly skilled AI Solutions Engineer to design, build, operate, and continuously improve the cloud and hybrid platforms that support AI-enabled services.…
Added 1 hour ago
F5 Advanced Web Application Firewall Engineer
Core4ce Careers
Remote, United States
API and JSON/XML security controls, where applicable
Added 1 hour ago
Sr Platform Engineer
Mayo US
Rochester, MN
Under the direction of the Director – Platform Technology and the Principal Platform Integration Engineer, this team member will support the direct execution and delivery of all technical…

Core4ce Careers

F5 Advanced Web Application Firewall Engineer

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English

Original job description

Core4ce is seeking an experienced F5 Advanced Web Application Firewall (AWAF) Engineer to support the secure operation of enterprise web applications and application programming interfaces (APIs).

The successful candidate will work closely with the cybersecurity team to define WAF policy baselines for individual systems and applications. This individual will collaborate with system owners, application teams, and infrastructure personnel to validate expected application behavior, tune policies, reduce false positives, and maintain effective security enforcement.

The role will also support application security alert-response activities by analyzing WAF events, identifying potentially malicious activity, coordinating with appropriate stakeholders, and assisting with investigation, documentation, and mitigation.

Responsibilities:

WAF Policy Engineering and Administration

Design, configure, implement, and maintain F5 Advanced WAF/ASM policies for enterprise web applications and APIs.
Develop application-specific WAF policy baselines based on application architecture, functionality, data sensitivity, business risk, and security requirements.
Work with the cybersecurity team to establish repeatable WAF standards, policy-development procedures, and enforcement criteria.
Onboard new applications and services into the F5 WAF environment.
Configure and maintain protections for common web application and API attacks, including:
OWASP Top 10 threats
Signature-based attack detection
Protocol violations
Malicious file and payload types
Evasion techniques
Parameter and URL violations
Cookie and session-related attacks
API and JSON/XML security controls, where applicable
Review learning suggestions, traffic behavior, violations, and policy recommendations.
Move policies through appropriate staging, transparent, and blocking or enforcement modes.
Create, test, document, and maintain appropriate policy exceptions and trusted traffic controls.
Apply policy changes in accordance with change-management and cybersecurity procedures.

Policy Tuning and System Owner Collaboration

Partner with system owners, application developers, and infrastructure teams to understand legitimate application behavior.
Tune WAF policies to protect applications while maintaining availability and operational performance.
Investigate false positives and determine whether blocked or flagged requests represent legitimate business activity, application defects, or malicious behavior.
Recommend corrective actions for application issues identified through WAF policy analysis.
Review policy effectiveness and make improvements based on application changes, threat intelligence, vulnerability assessments, and observed attack patterns.
Maintain clear documentation of application-specific requirements, policy decisions, exceptions, and tuning activities.

Alert Analysis and Incident Support

Monitor and analyze WAF violations, security events, blocked requests, and anomalous traffic.
Assist the cybersecurity team with alert triage and response activities.
Investigate suspected attacks, including SQL injection, cross-site scripting, command injection, path traversal, protocol abuse, automated attacks, and other web-based threats.
Correlate WAF events with application, network, endpoint, and security-monitoring data when necessary.
Validate suspicious activity with system owners and other technical stakeholders.
Escalate significant or confirmed events in accordance with incident-response procedures.
Support containment, mitigation, and follow-up actions, including temporary policy changes or blocking controls when appropriate.
Prepare incident summaries, technical findings, and recommendations for remediation.
Identify recurring attack patterns and recommend improvements to WAF policies and broader security controls.

This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.

Requirements:

U.S. Citizen
Ability to obtain and maintain an active Secret security clearance.
Bachelor’s degree in cybersecurity, computer science, information technology, or a related technical field, or equivalent practical experience.
Minimum of 5 years of experience in cybersecurity, network security, application security, or a related field.
Minimum of 3 years of hands-on experience with F5 Advanced WAF, F5 ASM, or a comparable enterprise WAF platform.
Demonstrated experience developing, deploying, administering, and tuning F5 WAF policies.
Experience establishing application-specific WAF policy baselines and enforcement requirements.
Experience working directly with application owners, developers, and infrastructure teams to analyze application behavior and resolve false positives.
Experience analyzing WAF logs, violations, security events, and blocked traffic.
Working knowledge of web application and API security concepts, including:
HTTP and HTTPS
TLS
HTTP methods, headers, cookies, and sessions
URLs, parameters, and payloads
JSON and XML
REST APIs
Authentication and authorization
Strong knowledge of common web application vulnerabilities and attack techniques, including the OWASP Top 10.
Experience assisting with cybersecurity alert triage, incident investigation, or incident-response activities.
Ability to document technical findings, policy decisions, exceptions, and recommended actions.
Excellent written and verbal communication skills.

Preferred Qualifications:

F5 Certified Technology Specialist certification or equivalent F5 AWAF/ASM experience.
Experience with F5 BIG-IP administration and related technologies, including LTM, APM, iRules, Local Traffic Policies, and SSL profiles.
Experience protecting APIs, microservices, cloud-hosted applications, and distributed application architectures.
Experience with F5 WAF policy automation, REST APIs, configuration management, or infrastructure-as-code.
Experience integrating F5 WAF with SIEM, SOAR, ticketing, or security orchestration platforms.
Familiarity with F5 WAF event logging, reporting, and analytics capabilities.
Experience using Splunk, Microsoft Sentinel, or comparable security-monitoring platforms.
Familiarity with vulnerability scanners and application-security testing tools.
Experience supporting penetration tests and validating application-security remediation.
Knowledge of secure software development practices and common application deployment methods.
Familiarity with NIST, DoD, FedRAMP, FISMA, or other applicable cybersecurity frameworks and controls.
Experience working in a federal, DoD, healthcare, or other regulated environment.
Security+ CE or another applicable DoD 8570/8140 baseline certification.

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers - driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

401(k) with 100% company match on the first 6% deferred, with immediate vesting
Comprehensive medical, dental, and vision coverage - employee portion paid 100% by Core4ce
Unlimited access to training and certifications, with no pre-set cap on eligible professional development
Tuition assistance for job-related degrees and courses
Paid parental leave, PTO that grows with tenure, and generous holiday schedules
Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters - supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.

*Core4ce provides the listed pay range for this position as a general guideline only and not as a guarantee of compensation or salary. Final offers may take into account a variety of factors, including, but not limited to, job responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data alignment, any applicable collective bargaining agreement, and other legal requirements.

Apply About employer

Report this job