Jobs in the United States

25+ jobs

Save this search

Added 2 mins ago
System Design Engineer
Kinder Morgan
COLORADO SPRINGS, CO
The System Design engineer is responsible for capacity management, operational support, and developing expansion designs for natural gas transmission systems utilizing pipeline hydraulic…
Added 4 mins ago
W
Senior Incident Response Engineer
WATTS
North Andover, MA
- $152,000 to $168,000 USD / year
The Senior Incident Response Engineer will own complex investigations from initial escalation through containment, remediation, and closure; investigate security incidents across cloud and…
Added 4 mins ago
AI Automation Engineer - CoPilot
CGI Technologies and Solutions, Inc.
Canton, MA
CGI is seeking an AI Automation Engineer to design, deploy, and support intelligent AI agents in Microsoft Copilot Studio that transform manual tasks and streamline business processes. In…
Added 4 mins ago
Mechanical Engineer - Sustaining
Amphenol Alden Products Company
Stoughton, MA
Help Engineer the Connections That Make a Difference in Patient Care! Are you a mechanical engineer who enjoys solving problems, improving product designs, and seeing your work make a…
Added 4 mins ago
Electronics Engineering-Associate Staff
MIT Lincoln Laboratory
Lexington, MA
Group 76, Software and Electronics Engineering, is seeking an Electronics Engineer to work on mixed-signal, analog, digital, RF, or power electronics systems. Activities may include…
Added 4 mins ago
Sr Specialist, Systems Engineer (Space Systems)
L3Harris
Wilmington, MA
L3Harris Technologies has an opening for a Systems Engineer in Wilmington, MA. The ideal candidate for this position will be proficient in all aspects of the systems engineering process,…
Added 4 mins ago
Account Manager - Direct Rental Sales (DRS)
Trane Technologies
Wilmington, MA
East Providence, RI (Hybrid / Field-Based with Territory Travel)
Added 4 mins ago
P
Senior Electrical Engineer
Pfizer
Andover, MA
- $99,200 to $165,400 USD / year
Provide technical support for field and customer activities, including:
Added 4 mins ago
Distribution Engineering Manager
Leidos
Framingham, MA
Provide technical oversight, direction, and support for project teams.
Added 4 mins ago
Associate Engineer / Technician
Rousselet-Robatel
Pittsfield, MA
The Associate Engineer / Technician will support the design engineering and field service engineering teams to deliver specific client services related to our centrifugation systems. The…
Added 4 mins ago
Q
Product Quality Engineer
Qnity
Marlborough, MA
- $99,120 to $155,760 USD / year
Bachelor’s or advanced degree in Chemical Engineering, Materials Science, or a related technical discipline. A PhD in Chemical Engineering or a closely related field is highly valued for…
Added 4 mins ago
Full Stack Engineer
CGI Technologies and Solutions, Inc.
Burlington, MA
CGI is seeking to hire an experienced Full Stack Engineer with strong hands-on expertise in Java, Angular, Node.js, APIs, microservices, and event-driven architectures.
Added 4 mins ago
Full Stack Engineer
CGI Technologies and Solutions, Inc.
Burlington, MA
CGI is seeking to hire an experienced Full Stack Software Engineer with Customer Service Platform/Contact Center technology experience to join our Digital Platform Engineering team.
Added 5 mins ago
Senior Quantum Information Engineer
IBM
Cambridge, MA
We are seeking an experienced Senior Quantum Information Engineer to join our team. In this role, you will be part of our mission to implement the latest capabilities in Quantum Computing…
Added 5 mins ago
Senior SWIFT & Payments Platform Engineer
CGI Technologies and Solutions, Inc.
Boston, MA
We are seeking a highly motivated Senior Engineer to join the SWIFT & Payments Technology team. This role will develop and support critical payment infrastructure supporting SWIFT…
Added 5 mins ago
Staff Full-stack Engineer - Shopping (Remote-eligible)
Capital One
Boston, MA
As a Staff Engineer at Capital One, you will be part of a community of technical experts working to define the future of banking in the cloud. You will work alongside our talented team of…
Added 5 mins ago
Site Reliability Engineer
Highmark Health
Boston, MA
…operations to minimize downtime, improve system resilience, and to support clinical workflows and continuity of hospital operations. Works cross-functionally with AHN site leaders and teams…
Added 5 mins ago
Electrical Engineer (47756)
Jacobs
New Bedford, MA · Boston, MA
…innovative, sustainable solutions. We’re driven by collaboration, technical excellence, and a passion for solving some of the world’s most complex challenges --…
Added 5 mins ago
Platform Infrastructure Engineer
Maximus
Boston, MA
Maximus is seeking a highly skilled individual to join our team as a Platform Infrastructure Engineer. You will be responsible for the deployment and maintenance of several platforms…
Added 5 mins ago
MAC - Deskside Support Engineer
Cognizant
Boston, MA
We are seeking a talented and dedicated individual to join our team as a Deskside Support Engineer/Field Service Engineer. The successful candidate will be responsible for providing…
Added 5 mins ago
Network and Systems Engineer III – IT Solutions Implementor
Amentum
Boston, MA
Amentum seeks a Network and Systems Engineer III – IT Solutions Implementor to provide IT solutions and support (remotely), for Amentum programs and projects worldwide. This is a…
Added 5 mins ago
Senior Financial Planning & Analysis Manager
Cornerstone OnDemand
Boston, MA
Support software capitalization analysis with Accounting and track engineering efficiency metrics (e.g., R&D as a percent of revenue, cost per engineer)
Added 5 mins ago
Senior Principal Engineer - R&D Digital
J&J Family of Companies
Boston, MA
This role will guide the technical direction, architecture, scope and day-to-day execution of a project along with others while acting as a bridge between engineering teams and…
Added 5 mins ago
Quality Assurance Manager (Mgr Quality 3) - 30981
HII
Pocasset, MA
Collaborate extensively with Engineering to embed requirements traceability, verification/validation readiness, and risk-based quality gates into technical reviews (SRR, PDR, CDR, PRR).
Added 5 mins ago
Principal Software Engineer
Candela Corporation
Marlborough, MA
…18 countries worldwide and are supported by capital sales, field service, clinical education, technical support and marketing development organizations. Candela maintains contracted…

Core4ce Careers

F5 Advanced Web Application Firewall Engineer

Remote, United States

Apply About employer

Applications open in a new tab.

Job details

Posting language: English

Original job description

Core4ce is seeking an experienced F5 Advanced Web Application Firewall (AWAF) Engineer to support the secure operation of enterprise web applications and application programming interfaces (APIs).

The successful candidate will work closely with the cybersecurity team to define WAF policy baselines for individual systems and applications. This individual will collaborate with system owners, application teams, and infrastructure personnel to validate expected application behavior, tune policies, reduce false positives, and maintain effective security enforcement.

The role will also support application security alert-response activities by analyzing WAF events, identifying potentially malicious activity, coordinating with appropriate stakeholders, and assisting with investigation, documentation, and mitigation.

Responsibilities:

WAF Policy Engineering and Administration

Design, configure, implement, and maintain F5 Advanced WAF/ASM policies for enterprise web applications and APIs.
Develop application-specific WAF policy baselines based on application architecture, functionality, data sensitivity, business risk, and security requirements.
Work with the cybersecurity team to establish repeatable WAF standards, policy-development procedures, and enforcement criteria.
Onboard new applications and services into the F5 WAF environment.
Configure and maintain protections for common web application and API attacks, including:
OWASP Top 10 threats
Signature-based attack detection
Protocol violations
Malicious file and payload types
Evasion techniques
Parameter and URL violations
Cookie and session-related attacks
API and JSON/XML security controls, where applicable
Review learning suggestions, traffic behavior, violations, and policy recommendations.
Move policies through appropriate staging, transparent, and blocking or enforcement modes.
Create, test, document, and maintain appropriate policy exceptions and trusted traffic controls.
Apply policy changes in accordance with change-management and cybersecurity procedures.

Policy Tuning and System Owner Collaboration

Partner with system owners, application developers, and infrastructure teams to understand legitimate application behavior.
Tune WAF policies to protect applications while maintaining availability and operational performance.
Investigate false positives and determine whether blocked or flagged requests represent legitimate business activity, application defects, or malicious behavior.
Recommend corrective actions for application issues identified through WAF policy analysis.
Review policy effectiveness and make improvements based on application changes, threat intelligence, vulnerability assessments, and observed attack patterns.
Maintain clear documentation of application-specific requirements, policy decisions, exceptions, and tuning activities.

Alert Analysis and Incident Support

Monitor and analyze WAF violations, security events, blocked requests, and anomalous traffic.
Assist the cybersecurity team with alert triage and response activities.
Investigate suspected attacks, including SQL injection, cross-site scripting, command injection, path traversal, protocol abuse, automated attacks, and other web-based threats.
Correlate WAF events with application, network, endpoint, and security-monitoring data when necessary.
Validate suspicious activity with system owners and other technical stakeholders.
Escalate significant or confirmed events in accordance with incident-response procedures.
Support containment, mitigation, and follow-up actions, including temporary policy changes or blocking controls when appropriate.
Prepare incident summaries, technical findings, and recommendations for remediation.
Identify recurring attack patterns and recommend improvements to WAF policies and broader security controls.

This position is designed to be flexible, with responsibilities evolving to meet business needs and enable individual growth.

Requirements:

U.S. Citizen
Ability to obtain and maintain an active Secret security clearance.
Bachelor’s degree in cybersecurity, computer science, information technology, or a related technical field, or equivalent practical experience.
Minimum of 5 years of experience in cybersecurity, network security, application security, or a related field.
Minimum of 3 years of hands-on experience with F5 Advanced WAF, F5 ASM, or a comparable enterprise WAF platform.
Demonstrated experience developing, deploying, administering, and tuning F5 WAF policies.
Experience establishing application-specific WAF policy baselines and enforcement requirements.
Experience working directly with application owners, developers, and infrastructure teams to analyze application behavior and resolve false positives.
Experience analyzing WAF logs, violations, security events, and blocked traffic.
Working knowledge of web application and API security concepts, including:
HTTP and HTTPS
TLS
HTTP methods, headers, cookies, and sessions
URLs, parameters, and payloads
JSON and XML
REST APIs
Authentication and authorization
Strong knowledge of common web application vulnerabilities and attack techniques, including the OWASP Top 10.
Experience assisting with cybersecurity alert triage, incident investigation, or incident-response activities.
Ability to document technical findings, policy decisions, exceptions, and recommended actions.
Excellent written and verbal communication skills.

Preferred Qualifications:

F5 Certified Technology Specialist certification or equivalent F5 AWAF/ASM experience.
Experience with F5 BIG-IP administration and related technologies, including LTM, APM, iRules, Local Traffic Policies, and SSL profiles.
Experience protecting APIs, microservices, cloud-hosted applications, and distributed application architectures.
Experience with F5 WAF policy automation, REST APIs, configuration management, or infrastructure-as-code.
Experience integrating F5 WAF with SIEM, SOAR, ticketing, or security orchestration platforms.
Familiarity with F5 WAF event logging, reporting, and analytics capabilities.
Experience using Splunk, Microsoft Sentinel, or comparable security-monitoring platforms.
Familiarity with vulnerability scanners and application-security testing tools.
Experience supporting penetration tests and validating application-security remediation.
Knowledge of secure software development practices and common application deployment methods.
Familiarity with NIST, DoD, FedRAMP, FISMA, or other applicable cybersecurity frameworks and controls.
Experience working in a federal, DoD, healthcare, or other regulated environment.
Security+ CE or another applicable DoD 8570/8140 baseline certification.

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers - driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

401(k) with 100% company match on the first 6% deferred, with immediate vesting
Comprehensive medical, dental, and vision coverage - employee portion paid 100% by Core4ce
Unlimited access to training and certifications, with no pre-set cap on eligible professional development
Tuition assistance for job-related degrees and courses
Paid parental leave, PTO that grows with tenure, and generous holiday schedules
Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters - supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.

*Core4ce provides the listed pay range for this position as a general guideline only and not as a guarantee of compensation or salary. Final offers may take into account a variety of factors, including, but not limited to, job responsibilities, education, experience, knowledge, skills, abilities, internal equity, market data alignment, any applicable collective bargaining agreement, and other legal requirements.

Apply About employer

Report this job