Jobs in the United States

25+ jobs

Save this search

Added just now
National Manager, Software Engineer
Toyota
Plano, TX
…freedom of movement for everyone. We are seeking a Director, Software Engineering, to serve as the Technology Domain Owner…
Added 1 min ago
Manager, Software Engineering
UPS
ALPHARETTA, GA
Leads the engineering strategy, architecture, and delivery of digital products and platforms supporting UPS.com and Web Shipping capabilities. Partners with Product Management,…
Added 1 min ago
DSP Engineer
DPG Solutions LLC
Aurora, CO
We are seeking a Senior Principal Platform DevOps Engineer with a strong background in Windows systems engineering, cloud infrastructure, and automation to join the DPG team. This role…
Added 2 mins ago
High-Speed -Hardware Design Engineer
Capgemini
Santa Clara, CA, CA
At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies…
Added 2 mins ago
Mechanical Engineer II - Projects
Freeport McMoRan
Safford, AZ
Under general supervision, contribute to and lead multidisciplinary teams in the development and execution of design, redesign, system failure analysis, failure prevention, and other…
Added 2 mins ago
Senior Mechanical Engineer - Projects
Freeport McMoRan
Safford, AZ
Under general supervision, contribute to and lead multidisciplinary teams in the development and execution of design, redesign, system failure analysis, failure prevention, and other…
Added 3 mins ago
Senior Specialist, Systems Engineer - Mission Planner
L3Harris Technologies
Palm Bay, FL
Collaborate with engineering, flight dynamics, payload operations, ground systems, and program leadership to translate mission requirements into executable operational plans.
Added 3 mins ago
Senior Principal Software Application Security
The Huntington National Bank
Remote, United States
We are seeking a highly experienced Senior Principal Software Application Security to lead the design, development, deployment, and operation of enterprise-scale frameworks and AI solutions…
Added 3 mins ago
F
Member Concierge
Flexcar
Morrow, GA
- $22.5 USD / hour
…helping you build your skills, and supporting your professional development every step of the way. As a key player in our success, you’ll work with some of the largest fleet companies in…
Added 4 mins ago
IT Business Analyst
Associa
Richardson, TX
We are seeking a Business Analyst to serve as a critical bridge between business stakeholders and software development teams. The primary focus of this role is to understand business needs,…
Added 5 mins ago
EW
Electrical & Electronics Engineering Intern (Summer 2027)
EMC Water LLC
Downers Grove, IL
- $20 to $25 USD / hour
Collaborate with hardware, software, mechanical, and product engineering teams on product development initiatives.
Added 5 mins ago
Hardware Test Technician - Lab Manager
Life360
Fremont, CA
We're looking for an experienced Hardware Test Technician to run our hardware test lab and support the engineering team across everything it takes to ship reliable consumer devices - test…
Added 5 mins ago
Water Infrastructure Practice Leader - Richfield
Civil Science
Richfield
…technical leadership, support project delivery, drive business development, and unify water expertise across multiple offices and disciplines. You will help shape the strategic direction of…
Added 5 mins ago
Water Infrastructure Practice Leader - Las Vegas
Civil Science
Las Vegas
…technical leadership, support project delivery, drive business development, and unify water expertise across multiple offices and disciplines. You will help shape the strategic direction of…
Added 5 mins ago
Water Infrastructure Practice Leader - St. George
Civil Science
St George
…technical leadership, support project delivery, drive business development, and unify water expertise across multiple offices and disciplines. You will help shape the strategic direction of…
Added 6 mins ago
Engineering Manager - Mini Excavator Integration & Performance
Clayton, NC
…across Mini Hydraulic Excavator (MHE) products. You will lead engineering teams with an emphasis on controls development, machine performance, systems integration, and software development…
Added 7 mins ago
Business Development Manager - Embedded Software Services
Jabil Inc.
Remote, United States
Drive 100% new business development activities focused on acquiring new customers requiring embedded software engineering services.
Added 7 mins ago
A
Industrial Estimator
Actalent
Lynnwood, WA
- $120,000 to $160,000 USD / year
…environment. The Estimator works closely with project teams, business development, and line-of-business leadership in a collaborative office setting that supports detailed analytical work…
Added 9 mins ago
Analyst EIT Program/Sys
CPS Energy
San Antonio, TX
…Information System (WMIS) and Mobile Data System (MDS), application development, configuration management, system administration, hardware support, software support, maintenance, security,…
Added 10 mins ago
Quality Systems Engineer - Millennium Space Systems
Millennium Space Systems
El Segundo, CA
…readiness, and systemic process improvement - partnering with Engineering, Manufacturing, Global Supply Chain, and Program teams to embed a culture of quality and compliance throughout the…
Added 10 mins ago
Service Management - Analyst, Global Public Sector, Early Talent
Salesforce, Inc.
IN
Act as an operational touchpoint between site IT, software engineering teams, and external third-party software vendors.
Added 10 mins ago
Associate Technical Architect - Data - USA
Quantiphi, Inc.
Remote, United States
…alternative investments - paired with senior-level hands-on data engineering chops (Snowflake, Python, advanced SQL) and proven delivery acumen across the full software and data development…
Added 10 mins ago
Associate Director, DevSecOps Architect
S&P Global Inc.
Princeton, NJ
Our Corporate Technology team serves as the centralized platform engineering function, establishing enterprise-wide DevSecOps standards and architectural patterns that enable secure,…
Added 10 mins ago
Director, DevOps Engineering
S&P Global Inc.
Princeton, NJ
S&P Global's DevOps Engineering organization sits at the centre of how the firm delivers software - building and operating the pipelines, platforms, and infrastructure that enable fast,…
Added 10 mins ago
Engineer I
COV Covidien LP
Plymouth, MN
The Engineer I will support New Product Development within Medtronic’s R&D team in the Peripheral Vascular Health (PVH) Operating Unit. This role supports all phases of product development,…

Core4ce Careers

F5 Advanced Web Application Firewall Engineer

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English

Original job description

Core4ce is seeking an experienced F5 Advanced Web Application Firewall (AWAF) Engineer to support the secure operation of enterprise web applications and application programming interfaces (APIs).

The successful candidate will work closely with the cybersecurity team to define WAF policy baselines for individual systems and applications. This individual will collaborate with system owners, application teams, and infrastructure personnel to validate expected application behavior, tune policies, reduce false positives, and maintain effective security enforcement.

The role will also support application security alert-response activities by analyzing WAF events, identifying potentially malicious activity, coordinating with appropriate stakeholders, and assisting with investigation, documentation, and mitigation.

Responsibilities:

WAF Policy Engineering and Administration

Design, configure, implement, and maintain F5 Advanced WAF/ASM policies for enterprise web applications and APIs.
Develop application-specific WAF policy baselines based on application architecture, functionality, data sensitivity, business risk, and security requirements.
Work with the cybersecurity team to establish repeatable WAF standards, policy-development procedures, and enforcement criteria.
Onboard new applications and services into the F5 WAF environment.
Configure and maintain protections for common web application and API attacks, including:
OWASP Top 10 threats
Signature-based attack detection
Protocol violations
Malicious file and payload types
Evasion techniques
Parameter and URL violations
Cookie and session-related attacks
API and JSON/XML security controls, where applicable
Review learning suggestions, traffic behavior, violations, and policy recommendations.
Move policies through appropriate staging, transparent, and blocking or enforcement modes.
Create, test, document, and maintain appropriate policy exceptions and trusted traffic controls.
Apply policy changes in accordance with change-management and cybersecurity procedures.

Policy Tuning and System Owner Collaboration

Partner with system owners, application developers, and infrastructure teams to understand legitimate application behavior.
Tune WAF policies to protect applications while maintaining availability and operational performance.
Investigate false positives and determine whether blocked or flagged requests represent legitimate business activity, application defects, or malicious behavior.
Recommend corrective actions for application issues identified through WAF policy analysis.
Review policy effectiveness and make improvements based on application changes, threat intelligence, vulnerability assessments, and observed attack patterns.
Maintain clear documentation of application-specific requirements, policy decisions, exceptions, and tuning activities.

Alert Analysis and Incident Support

Monitor and analyze WAF violations, security events, blocked requests, and anomalous traffic.
Assist the cybersecurity team with alert triage and response activities.
Investigate suspected attacks, including SQL injection, cross-site scripting, command injection, path traversal, protocol abuse, automated attacks, and other web-based threats.
Correlate WAF events with application, network, endpoint, and security-monitoring data when necessary.
Validate suspicious activity with system owners and other technical stakeholders.
Escalate significant or confirmed events in accordance with incident-response procedures.
Support containment, mitigation, and follow-up actions, including temporary policy changes or blocking controls when appropriate.
Prepare incident summaries, technical findings, and recommendations for remediation.
Identify recurring attack patterns and recommend improvements to WAF policies and broader security controls.

This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.

Requirements:

U.S. Citizen
Ability to obtain and maintain an active Secret security clearance.
Bachelor’s degree in cybersecurity, computer science, information technology, or a related technical field, or equivalent practical experience.
Minimum of 5 years of experience in cybersecurity, network security, application security, or a related field.
Minimum of 3 years of hands-on experience with F5 Advanced WAF, F5 ASM, or a comparable enterprise WAF platform.
Demonstrated experience developing, deploying, administering, and tuning F5 WAF policies.
Experience establishing application-specific WAF policy baselines and enforcement requirements.
Experience working directly with application owners, developers, and infrastructure teams to analyze application behavior and resolve false positives.
Experience analyzing WAF logs, violations, security events, and blocked traffic.
Working knowledge of web application and API security concepts, including:
HTTP and HTTPS
TLS
HTTP methods, headers, cookies, and sessions
URLs, parameters, and payloads
JSON and XML
REST APIs
Authentication and authorization
Strong knowledge of common web application vulnerabilities and attack techniques, including the OWASP Top 10.
Experience assisting with cybersecurity alert triage, incident investigation, or incident-response activities.
Ability to document technical findings, policy decisions, exceptions, and recommended actions.
Excellent written and verbal communication skills.

Preferred Qualifications:

F5 Certified Technology Specialist certification or equivalent F5 AWAF/ASM experience.
Experience with F5 BIG-IP administration and related technologies, including LTM, APM, iRules, Local Traffic Policies, and SSL profiles.
Experience protecting APIs, microservices, cloud-hosted applications, and distributed application architectures.
Experience with F5 WAF policy automation, REST APIs, configuration management, or infrastructure-as-code.
Experience integrating F5 WAF with SIEM, SOAR, ticketing, or security orchestration platforms.
Familiarity with F5 WAF event logging, reporting, and analytics capabilities.
Experience using Splunk, Microsoft Sentinel, or comparable security-monitoring platforms.
Familiarity with vulnerability scanners and application-security testing tools.
Experience supporting penetration tests and validating application-security remediation.
Knowledge of secure software development practices and common application deployment methods.
Familiarity with NIST, DoD, FedRAMP, FISMA, or other applicable cybersecurity frameworks and controls.
Experience working in a federal, DoD, healthcare, or other regulated environment.
Security+ CE or another applicable DoD 8570/8140 baseline certification.

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers - driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

401(k) with 100% company match on the first 6% deferred, with immediate vesting
Comprehensive medical, dental, and vision coverage - employee portion paid 100% by Core4ce
Unlimited access to training and certifications, with no pre-set cap on eligible professional development
Tuition assistance for job-related degrees and courses
Paid parental leave, PTO that grows with tenure, and generous holiday schedules
Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters - supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.

*Core4ce provides the listed pay range for this position as a general guideline only and not as a guarantee of compensation or salary. Final offers may take into account a variety of factors, including, but not limited to, job responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data alignment, any applicable collective bargaining agreement, and other legal requirements.

Apply About employer

Report this job