Senior Web/Network Security Engineer

Manifest Solutions is currently seeking a Senior Web/Network Security Engineer for an onsite position in Columbus, OH.

• Design, implementation, and support of enterprise web application and network security solutions.
• Responsible for securing internet-facing applications through F5 Distributed Cloud WAF, API security, bot protection, and network security technologies including Palo Alto firewalls and secure remote access solutions.
• Administer and support F5 Distributed Cloud (XC) WAF platform.
• Deploy and maintain WAF policies, signatures, and security controls.
• Configure: API Protection, Bot Defense, DDoS Mitigation, Geolocation Policies, Rate Limiting, CAPTCHA Challenges
• Investigate and tune false positives.
• Perform application onboarding into WAF services.
• Conduct WAF policy reviews and optimization.
• Support incident response involving web application attacks.
• Understand and mitigate: OWASP Top 10, Authentication attacks. API abuse, Credential stuffing, Session hijacking, Cross-Site Scripting (XSS), SQL Injection, SSRF, CSRF.
• Review application architectures and recommend security improvements.
• Partner with development teams during application onboarding and troubleshooting.
• Network Security Administer and support: Palo Alto Networks, NGFW Prisma, Access Site-to-site VPNs, SSL decryption, NAT and security policies, Network segmentation, DNS and routing troubleshooting.
• Support production incidents and participate in on-call rotation.
• Develop automation using: Python REST APIs, Terraform, Git.
• Build dashboards and reporting around security posture.
• Automate repetitive operational tasks.
• Participate in: Incident response, Threat hunting, Security assessments, Vulnerability remediation, Root cause analysis, Architecture reviews

Qualifications:

• Bot Management
• API Security
• DDoS Protection
• CDN technologies
• DevSecOps
• CI/CD pipelines
• Kubernetes
• Containers
• Terraform
• Certifications: OWASP Foundation certifications, ISC2 CISSP, GIAC certifications, F5 certifications, Palo Alto Networks certifications