Senior Web/Network Security Engineer

M

Manifest Solutions

Senior Web/Network Security Engineer

Columbus, OH
Full Time
Paid
  • Responsibilities

    Manifest Solutions is currently seeking a Senior Web/Network Security Engineer for an onsite position in Columbus, OH.

    • Design, implementation, and support of enterprise web application and network security solutions.
    • Responsible for securing internet-facing applications through F5 Distributed Cloud WAF, API security, bot protection, and network security technologies including Palo Alto firewalls and secure remote access solutions.
    • Administer and support F5 Distributed Cloud (XC) WAF platform.
    • Deploy and maintain WAF policies, signatures, and security controls.
    • Configure: API Protection, Bot Defense, DDoS Mitigation, Geolocation Policies, Rate Limiting, CAPTCHA Challenges
    • Investigate and tune false positives.
    • Perform application onboarding into WAF services.
    • Conduct WAF policy reviews and optimization.
    • Support incident response involving web application attacks.
    • Understand and mitigate: OWASP Top 10, Authentication attacks. API abuse, Credential stuffing, Session hijacking, Cross-Site Scripting (XSS), SQL Injection, SSRF, CSRF.
    • Review application architectures and recommend security improvements.
    • Partner with development teams during application onboarding and troubleshooting.
    • Network Security Administer and support: Palo Alto Networks, NGFW Prisma, Access Site-to-site VPNs, SSL decryption, NAT and security policies, Network segmentation, DNS and routing troubleshooting.
    • Support production incidents and participate in on-call rotation.
    • Develop automation using: Python REST APIs, Terraform, Git.
    • Build dashboards and reporting around security posture.
    • Automate repetitive operational tasks.
    • Participate in: Incident response, Threat hunting, Security assessments, Vulnerability remediation, Root cause analysis, Architecture reviews

    Qualifications:

    • Bot Management
    • API Security
    • DDoS Protection
    • CDN technologies
    • DevSecOps
    • CI/CD pipelines
    • Kubernetes
    • Containers
    • Terraform
    • Certifications: OWASP Foundation certifications, ISC2 CISSP, GIAC certifications, F5 certifications, Palo Alto Networks certifications