Jobs in the United States

25+ jobs

Save this search

Added 5 mins ago
Systems Engineer II
Barnett Engineering & Signaling Laboratories
Colorado Springs, CO
The Systems Engineer II is a developing professional with a solid foundational knowledge of systems engineering principles, processes, and tools who supports technical planning,…
Added 7 mins ago
Technical Project Manager / Senior Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
Establish and promote engineering standards for system availability, performance, scalability, security, resiliency, maintainability, and operational readiness.
Added 7 mins ago
Senior DevOps Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
We CGI is looking for a Senior DevOps Engineer with strong hands-on experience in Kubernetes or OpenShift, Jenkins, and Groovy based Jenkins libraries, to join our fast paced and dynamic…
Added 7 mins ago
Infrastructure Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
…activities; Troubleshoot and resolve infrastructure issues affecting system availability or performance; Ensure compliance with security, documentation, and operational standards;…
Added 7 mins ago
DevOps Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
The DevOps Engineer is an engineer responsible for designing, implementing, and supporting CI/CD pipelines, automation frameworks, and monitoring solutions that improve software delivery…
Added 7 mins ago
Site Reliability Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
The Site Reliability Engineer is an engineer responsible for supporting reliability engineering tasks under the guidance of senior technical staff. This role applies foundational knowledge…
Added 7 mins ago
Senior AI/DevOps Engineer
CGI Technologies and Solutions, Inc.
Lafayette, LA
CGI is seeking a Senior AI/DevOps Engineer to join a fast-paced technology team supporting a Corporate Risk and Compliance organization within a large financial services environment. This…
Added 7 mins ago
Senior AWS Production Support Engineer *
CGI Technologies and Solutions, Inc.
Lafayette, LA
. Deep expertise in at least two areas and intermediate knowledge in three others: cloud infrastructure, security, system operations, networking, databases, and development/DevOps.
Added 7 mins ago
Golden Gate technical specialist
CGI Technologies and Solutions, Inc.
Lafayette, LA
As a Data Integration Engineer specializing in Oracle GoldenGate, you will play a key role in designing, implementing, and supporting enterprise grade data replication and integration…
Added 7 mins ago
SAP S/4HANA Test Engineer - U.S. Citizenship Required
CGI Technologies and Solutions, Inc.
Lafayette, LA
CGI is seeking a high‑potential Automated/Functional Testing Consultant or Test Engineer with experience testing SAP ECC or S/4HANA. The successful candidate will work closely with clients,…
Added 7 mins ago
Sr. DevSecOps Engineer - U.S. Citizenship Required
CGI Technologies and Solutions, Inc.
Lafayette, LA
To support continued growth, we’re seeking a senior DevSecOps engineer who can quickly learn new technologies, enhance existing systems, and understand the client ecosystem. You’ll automate…
Added 7 mins ago
Business Analyst - Functional (Junior)
CGI Technologies and Solutions, Inc.
Lafayette, LA
. Determine client requirements and transform them into system specifications, translating requirements into technical language for developers, and identifying opportunities for improving…
Added 7 mins ago
Senior Software Engineer - Global Forwarding Technology
C.H. Robinson
New Orleans, LA
C.H Robinson is seeking a Senior Software Engineer role on our Global Forwarding
Added 7 mins ago
Staff Software Engineer - IAM
General Motors
Baton Rouge, LA
We’re looking for a Security Software Engineer to join the Security Products Engineering team and drive the design and implementation of security-focused software and services across GM.…
Added 8 mins ago
Lead Software Engineer
Evolent
Baton Rouge, LA
…care, we seek to connect the pieces of fragmented health care system and ensure people get the same level of care and compassion we would want for our loved…
Added 8 mins ago
Data Scientist 1
Baylor Scott & White Health
Baton Rouge, LA
…Baylor Scott and White is the largest not-for-profit healthcare system in Texas that empowers you to live…
Added 8 mins ago
Cybersecurity Engineer (Cloud)
Amentum
Baton Rouge, LA
Working knowledge of generative AI and agentic-system security risks, including data exposure, prompt injection, tool and connector permissions, agent identities, secure execution, and…
Added 13 mins ago
Data Engineer
T-Mobile USA, Inc.
Bellevue, WA
As a Data Engineer for the Product Innovation Team, you will play a key role in designing, building, and optimizing scalable data pipelines and cloud-based data architectures that power…
Added 16 mins ago
S
Principal System Test Engineer and Lead - Wireless
Skyworks
San Jose, CA
- $122,900 to $255,200 USD / year
We are looking for a hands-on System Test Engineer / Test Lead with to own system-level testing of our wireless products. You will define and run test plans, build the automation behind…
Added 22 mins ago
Information System Security Engineer (ISSE)
Akima, LLC
Alexandria, VA
Akima Data Management (ADM) is seeking a highly skilled and mission‑driven Information System Security Engineer (ISSE) to design, engineer, and validate cybersecurity capabilities across…
Added 27 mins ago
K
Cybersecurity Engineer
Kentro
Springfield, VA
- $145,000 to $180,000 USD / year
Develop, write, and maintain a formal Information Systems Security Program (ISSP) that includes all applicable security Information Systems (IS) documentation in accordance with NGA/OCIO…
Added 31 mins ago
O
Senior Core Infrastructure Engineer
Oracle
Nashville, TN · Austin, TX
- $79,200 to $209,500 USD / year
…automation/IaC for troubleshooting and maintenance, and applies advanced security controls (encryption, access, remediation) while ensuring change, compliance, and documentation standards…
Added 32 mins ago
Ford Racing Powertrain Procurement & Supply Chain Specialist
Ford
Allen Park, MI · Allen Park
Identify and standardize procedure(s) for security/system access needs.
Added 36 mins ago
Principal Site Reliability Engineer- Electronic Trading Services
JPMC page
Jersey City, NJ
As a Principal Site Reliability Engineer at JPMorganChase within the Enterprise Technology, Infrastructure Platforms team , you draw upon your advanced knowledge to identify new…
Added 38 mins ago
Desktop / Endpoint Engineer
SEI INVESTMENTS COMPANY
Oaks, PA

Core4ce Careers

F5 Advanced Web Application Firewall Engineer

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English

Original job description

Core4ce is seeking an experienced F5 Advanced Web Application Firewall (AWAF) Engineer to support the secure operation of enterprise web applications and application programming interfaces (APIs).

The successful candidate will work closely with the cybersecurity team to define WAF policy baselines for individual systems and applications. This individual will collaborate with system owners, application teams, and infrastructure personnel to validate expected application behavior, tune policies, reduce false positives, and maintain effective security enforcement.

The role will also support application security alert-response activities by analyzing WAF events, identifying potentially malicious activity, coordinating with appropriate stakeholders, and assisting with investigation, documentation, and mitigation.

Responsibilities:

WAF Policy Engineering and Administration

Design, configure, implement, and maintain F5 Advanced WAF/ASM policies for enterprise web applications and APIs.
Develop application-specific WAF policy baselines based on application architecture, functionality, data sensitivity, business risk, and security requirements.
Work with the cybersecurity team to establish repeatable WAF standards, policy-development procedures, and enforcement criteria.
Onboard new applications and services into the F5 WAF environment.
Configure and maintain protections for common web application and API attacks, including:
OWASP Top 10 threats
Signature-based attack detection
Protocol violations
Malicious file and payload types
Evasion techniques
Parameter and URL violations
Cookie and session-related attacks
API and JSON/XML security controls, where applicable
Review learning suggestions, traffic behavior, violations, and policy recommendations.
Move policies through appropriate staging, transparent, and blocking or enforcement modes.
Create, test, document, and maintain appropriate policy exceptions and trusted traffic controls.
Apply policy changes in accordance with change-management and cybersecurity procedures.

Policy Tuning and System Owner Collaboration

Partner with system owners, application developers, and infrastructure teams to understand legitimate application behavior.
Tune WAF policies to protect applications while maintaining availability and operational performance.
Investigate false positives and determine whether blocked or flagged requests represent legitimate business activity, application defects, or malicious behavior.
Recommend corrective actions for application issues identified through WAF policy analysis.
Review policy effectiveness and make improvements based on application changes, threat intelligence, vulnerability assessments, and observed attack patterns.
Maintain clear documentation of application-specific requirements, policy decisions, exceptions, and tuning activities.

Alert Analysis and Incident Support

Monitor and analyze WAF violations, security events, blocked requests, and anomalous traffic.
Assist the cybersecurity team with alert triage and response activities.
Investigate suspected attacks, including SQL injection, cross-site scripting, command injection, path traversal, protocol abuse, automated attacks, and other web-based threats.
Correlate WAF events with application, network, endpoint, and security-monitoring data when necessary.
Validate suspicious activity with system owners and other technical stakeholders.
Escalate significant or confirmed events in accordance with incident-response procedures.
Support containment, mitigation, and follow-up actions, including temporary policy changes or blocking controls when appropriate.
Prepare incident summaries, technical findings, and recommendations for remediation.
Identify recurring attack patterns and recommend improvements to WAF policies and broader security controls.

This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.

Requirements:

U.S. Citizen
Ability to obtain and maintain an active Secret security clearance.
Bachelor’s degree in cybersecurity, computer science, information technology, or a related technical field, or equivalent practical experience.
Minimum of 5 years of experience in cybersecurity, network security, application security, or a related field.
Minimum of 3 years of hands-on experience with F5 Advanced WAF, F5 ASM, or a comparable enterprise WAF platform.
Demonstrated experience developing, deploying, administering, and tuning F5 WAF policies.
Experience establishing application-specific WAF policy baselines and enforcement requirements.
Experience working directly with application owners, developers, and infrastructure teams to analyze application behavior and resolve false positives.
Experience analyzing WAF logs, violations, security events, and blocked traffic.
Working knowledge of web application and API security concepts, including:
HTTP and HTTPS
TLS
HTTP methods, headers, cookies, and sessions
URLs, parameters, and payloads
JSON and XML
REST APIs
Authentication and authorization
Strong knowledge of common web application vulnerabilities and attack techniques, including the OWASP Top 10.
Experience assisting with cybersecurity alert triage, incident investigation, or incident-response activities.
Ability to document technical findings, policy decisions, exceptions, and recommended actions.
Excellent written and verbal communication skills.

Preferred Qualifications:

F5 Certified Technology Specialist certification or equivalent F5 AWAF/ASM experience.
Experience with F5 BIG-IP administration and related technologies, including LTM, APM, iRules, Local Traffic Policies, and SSL profiles.
Experience protecting APIs, microservices, cloud-hosted applications, and distributed application architectures.
Experience with F5 WAF policy automation, REST APIs, configuration management, or infrastructure-as-code.
Experience integrating F5 WAF with SIEM, SOAR, ticketing, or security orchestration platforms.
Familiarity with F5 WAF event logging, reporting, and analytics capabilities.
Experience using Splunk, Microsoft Sentinel, or comparable security-monitoring platforms.
Familiarity with vulnerability scanners and application-security testing tools.
Experience supporting penetration tests and validating application-security remediation.
Knowledge of secure software development practices and common application deployment methods.
Familiarity with NIST, DoD, FedRAMP, FISMA, or other applicable cybersecurity frameworks and controls.
Experience working in a federal, DoD, healthcare, or other regulated environment.
Security+ CE or another applicable DoD 8570/8140 baseline certification.

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers - driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

401(k) with 100% company match on the first 6% deferred, with immediate vesting
Comprehensive medical, dental, and vision coverage - employee portion paid 100% by Core4ce
Unlimited access to training and certifications, with no pre-set cap on eligible professional development
Tuition assistance for job-related degrees and courses
Paid parental leave, PTO that grows with tenure, and generous holiday schedules
Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters - supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.

*Core4ce provides the listed pay range for this position as a general guideline only and not as a guarantee of compensation or salary. Final offers may take into account a variety of factors, including, but not limited to, job responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data alignment, any applicable collective bargaining agreement, and other legal requirements.

Apply About employer

Report this job