Jobs in the United States

25+ jobs

Save this search

Added just now
CO
GIS ENGINEER
City of Cathedral City
Cathedral City, CA
- $7,996.31 to $10,466.9 USD / month
…analytical work; develops, writes, tests, and implements GIS software; performs complex database manipulation; develops and maintains City base map and associated layers; assists in the…
Added 2 mins ago
Sr. Advanced Systems Engineer - Displays and Touch Screen Controllers
Real Time Consulting, LLC
Phoenix, AZ
JOB TITLE: Sr. Advanced Systems Engineer - Displays and Touch Screen Controllers
Added 2 mins ago
Systems Engineer - Aircraft Surveillance Systems
Real Time Consulting, LLC
Phoenix, AZ
JOB TITLE: System Engineer - Aircraft Surveillance Systems
Added 2 mins ago
Systems Engineer - Avionics Display Applications
Real Time Consulting, LLC
Phoenix, AZ
Experience creating test cases for software based upon use cases derived from the system and software requirements
Added 2 mins ago
Validation Engineer - Menominee Area
The Pivot Group Network
Menominee · Menominee, MI
Test Engineer, Computer System Validation Specialist, Regulatory Affairs Specialist, Quality Assurance Engineer, Quality Engineer, Process Validation Engineer, Equipment Qualification…
Added 2 mins ago
Embedded Systems Engineer - Dearborn Area
The Pivot Group Network
Dearborn · Dearborn, MI
Test Engineer, Embedded Software Engineer, Firmware Engineer, Embedded Systems Developer, Controls Engineer, Electrical Engineer, Software Engineer, Embedded, Hardware Engineer, Automation…
Added 5 mins ago
Test Engineer/Quality Assurance
Nightwing
Ft George G Meade, MD
The Senior Test Engineer/Quality Assurance professional leads testing strategy implementation and ensures software quality through comprehensive test automation and quality assurance…
Added 5 mins ago
Senior Security Engineer, Product Security
Komodo Health
United States
…Healthcare Map serves as our foundation for a powerful suite of software applications, helping us answer healthcare’s most complex questions for our partners. Across the healthcare…
Added 5 mins ago
CH
Data Engineer 2
Choice Hotels
North Bethesda, MD
- $107,000 to $127,000 USD / year
Choice Hotels, one of the world’s largest lodging franchisors, has an exciting new opportunity as our Data Engineer II in the Data Engineering team within our Advanced Analytics Team. The…
Added 5 mins ago
Staff Software Development Engineer – iOS
CVS Health
Remote, United States
…Currently, we are seeking a highly skilled and innovative Staff Software Development Engineer – iOS to join our growing digital engineering organization. This Staff Engineering role offers…
Added 5 mins ago
Data Product Manager & Quality Specialist (Senior)
Altamira Technology Corporation
Suitland, MD
…engineering team and data consumers. Develops and executes test plans for data pipelines, APIs, and data products to verify accuracy, completeness, and adherence to requirements. Performs…
Added 5 mins ago
Data Product & Quality Specialist (Journeyman)
Altamira Technology Corporation
Suitland, MD
…engineering team and data consumers. Develops and executes test plans for data pipelines, APIs, and data products to verify accuracy, completeness, and adherence to requirements. Performs…
Added 5 mins ago
INTERDISCIPLINARY ENGINEER/ PHYSICIST
Naval Air Systems Command
Patuxent River, MD
Added 5 mins ago
Mission Systems Engineer (Principal/Sr Principal) - Signatures Limitations and Constraints Management Lead (AHT)
Northrop Grumman
Linthicum Heights, MD
…part of Eastern Region Systems Engineering, Integration and Test (ER-SEIT), you will have the opportunity to experience the entire space design lifecycle. We do it all here, on-site, from…
Added 5 mins ago
Senior Automated Test Engineer
Leidos
Gaithersburg, MD
Leidos is seeking a Senior Test Automation Engineer to help deliver mission-essential software capabilities that enable intelligence professionals to access critical information, analyze…
Added 5 mins ago
Software Engineer (Hybrid) - 30861
Huntington Ingalls Industries
Fort Meade, MD
Enlighten is a cutting-edge technology company that is dedicated to developing innovative software solutions for our clients. We are currently seeking a talented and experienced Software…
Added 5 mins ago
SE
Software Engineer (Java/AWS Cloud) (SAB-2611-01)
Sabre Engineering Inc
Columbia, MD
- $120,000 to $150,000 USD / year
Added 5 mins ago
SE
AI Engineer (LLM Applications) (SAB-2611-06)
Sabre Engineering Inc
Columbia, MD
- $139,000 to $174,000 USD / year
Added 5 mins ago
Sr. Release Train Engineer TS/SCI Polygraph
Leidos
Annapolis Junction, MD
Leidos is seeking a Sr. Release Train Engineer (RTE) to support a high-performing agile program leveraging the Scaled Agile Framework (SAFe). This role is part of a large, fast-paced effort…
Added 5 mins ago
Microsoft SQL DBaaS Engineer – TS/SCI with Polygraph
General Dynamics Information Technology
Annapolis Junction, MD
Own your career as a MS SQL DBaaS Engineer at GDIT. Here, you’ll have the opportunity to build strong lines of systems engineering and develop your skills using cutting-edge technologies.…
Added 5 mins ago
Senior Principal Systems Engineer
Leonardo DRS, Inc.
Frederick, MD
…multiple functional groups - including Mechanical, Firmware, Software, and Test - to derive and decompose customer- and module-level…
Added 5 mins ago
Senior Software Engineer – Backend
Marriott
Bethesda, MD
As a Senior Software Engineer – Backend at Marriott, you will design, develop, and support scalable, secure, and high-performance backend services that power Marriott’s global digital…
Added 6 mins ago
Quality/Principal Quality Engineer - 2nd Shift
Northrop Grumman
Baltimore, MD
Work with Test Engineers on Test Engineering software.
Added 6 mins ago
Sr. Principal Engineer RF Microwave Design
Northrop Grumman
Baltimore, MD
We are looking for you to join our team as an RF Engineer based out of Linthicum, MD, in a role that will be 100% on-site.
Added 6 mins ago
Staff Engineer RF Microwave Design
Northrop Grumman
Baltimore, MD
We are looking for you to join our team as an RF Engineer based out of Linthicum, MD, in a role that will be 100% on-site.

Core4ce Careers

F5 Advanced Web Application Firewall Engineer

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English

Original job description

Core4ce is seeking an experienced F5 Advanced Web Application Firewall (AWAF) Engineer to support the secure operation of enterprise web applications and application programming interfaces (APIs).

The successful candidate will work closely with the cybersecurity team to define WAF policy baselines for individual systems and applications. This individual will collaborate with system owners, application teams, and infrastructure personnel to validate expected application behavior, tune policies, reduce false positives, and maintain effective security enforcement.

The role will also support application security alert-response activities by analyzing WAF events, identifying potentially malicious activity, coordinating with appropriate stakeholders, and assisting with investigation, documentation, and mitigation.

Responsibilities:

WAF Policy Engineering and Administration

Design, configure, implement, and maintain F5 Advanced WAF/ASM policies for enterprise web applications and APIs.
Develop application-specific WAF policy baselines based on application architecture, functionality, data sensitivity, business risk, and security requirements.
Work with the cybersecurity team to establish repeatable WAF standards, policy-development procedures, and enforcement criteria.
Onboard new applications and services into the F5 WAF environment.
Configure and maintain protections for common web application and API attacks, including:
OWASP Top 10 threats
Signature-based attack detection
Protocol violations
Malicious file and payload types
Evasion techniques
Parameter and URL violations
Cookie and session-related attacks
API and JSON/XML security controls, where applicable
Review learning suggestions, traffic behavior, violations, and policy recommendations.
Move policies through appropriate staging, transparent, and blocking or enforcement modes.
Create, test, document, and maintain appropriate policy exceptions and trusted traffic controls.
Apply policy changes in accordance with change-management and cybersecurity procedures.

Policy Tuning and System Owner Collaboration

Partner with system owners, application developers, and infrastructure teams to understand legitimate application behavior.
Tune WAF policies to protect applications while maintaining availability and operational performance.
Investigate false positives and determine whether blocked or flagged requests represent legitimate business activity, application defects, or malicious behavior.
Recommend corrective actions for application issues identified through WAF policy analysis.
Review policy effectiveness and make improvements based on application changes, threat intelligence, vulnerability assessments, and observed attack patterns.
Maintain clear documentation of application-specific requirements, policy decisions, exceptions, and tuning activities.

Alert Analysis and Incident Support

Monitor and analyze WAF violations, security events, blocked requests, and anomalous traffic.
Assist the cybersecurity team with alert triage and response activities.
Investigate suspected attacks, including SQL injection, cross-site scripting, command injection, path traversal, protocol abuse, automated attacks, and other web-based threats.
Correlate WAF events with application, network, endpoint, and security-monitoring data when necessary.
Validate suspicious activity with system owners and other technical stakeholders.
Escalate significant or confirmed events in accordance with incident-response procedures.
Support containment, mitigation, and follow-up actions, including temporary policy changes or blocking controls when appropriate.
Prepare incident summaries, technical findings, and recommendations for remediation.
Identify recurring attack patterns and recommend improvements to WAF policies and broader security controls.

This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.

Requirements:

U.S. Citizen
Ability to obtain and maintain an active Secret security clearance.
Bachelor’s degree in cybersecurity, computer science, information technology, or a related technical field, or equivalent practical experience.
Minimum of 5 years of experience in cybersecurity, network security, application security, or a related field.
Minimum of 3 years of hands-on experience with F5 Advanced WAF, F5 ASM, or a comparable enterprise WAF platform.
Demonstrated experience developing, deploying, administering, and tuning F5 WAF policies.
Experience establishing application-specific WAF policy baselines and enforcement requirements.
Experience working directly with application owners, developers, and infrastructure teams to analyze application behavior and resolve false positives.
Experience analyzing WAF logs, violations, security events, and blocked traffic.
Working knowledge of web application and API security concepts, including:
HTTP and HTTPS
TLS
HTTP methods, headers, cookies, and sessions
URLs, parameters, and payloads
JSON and XML
REST APIs
Authentication and authorization
Strong knowledge of common web application vulnerabilities and attack techniques, including the OWASP Top 10.
Experience assisting with cybersecurity alert triage, incident investigation, or incident-response activities.
Ability to document technical findings, policy decisions, exceptions, and recommended actions.
Excellent written and verbal communication skills.

Preferred Qualifications:

F5 Certified Technology Specialist certification or equivalent F5 AWAF/ASM experience.
Experience with F5 BIG-IP administration and related technologies, including LTM, APM, iRules, Local Traffic Policies, and SSL profiles.
Experience protecting APIs, microservices, cloud-hosted applications, and distributed application architectures.
Experience with F5 WAF policy automation, REST APIs, configuration management, or infrastructure-as-code.
Experience integrating F5 WAF with SIEM, SOAR, ticketing, or security orchestration platforms.
Familiarity with F5 WAF event logging, reporting, and analytics capabilities.
Experience using Splunk, Microsoft Sentinel, or comparable security-monitoring platforms.
Familiarity with vulnerability scanners and application-security testing tools.
Experience supporting penetration tests and validating application-security remediation.
Knowledge of secure software development practices and common application deployment methods.
Familiarity with NIST, DoD, FedRAMP, FISMA, or other applicable cybersecurity frameworks and controls.
Experience working in a federal, DoD, healthcare, or other regulated environment.
Security+ CE or another applicable DoD 8570/8140 baseline certification.

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers - driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

401(k) with 100% company match on the first 6% deferred, with immediate vesting
Comprehensive medical, dental, and vision coverage - employee portion paid 100% by Core4ce
Unlimited access to training and certifications, with no pre-set cap on eligible professional development
Tuition assistance for job-related degrees and courses
Paid parental leave, PTO that grows with tenure, and generous holiday schedules
Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters - supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.

*Core4ce provides the listed pay range for this position as a general guideline only and not as a guarantee of compensation or salary. Final offers may take into account a variety of factors, including, but not limited to, job responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data alignment, any applicable collective bargaining agreement, and other legal requirements.

Apply About employer

Report this job