Application security engineer

Position: Application security engineer

Location: Chicago, IL or Washington DC, or Charlotte, NC, or Denver, CO

Onsite: 5 days onsite (no exceptions)

Interview process: 1 video interview then 1 onsite interview (must onsite or they are out). The onsite interview will be the location closest to them.

Contract 18 months

Any Visa is fine on w2

Needs:

Web server/web application-based experience

Application Security

WAF experience

HTTP

HP Protocol

Can look at a web log and tell all the status codes

3 major tools they use:

F5 load balancer

AWS

Akamai: Content delivery network

Domains register in Akamai

Job Title

Application Security Engineer – Bot Detection & Traffic Routing

Overview

We are seeking an experienced Application Security Engineer to support the detection, analysis, and mitigation of automated bot traffic across enterprise web applications. This role will focus on web application security, traffic routing, load balancing, and content delivery optimization, working across technologies such as F5, AWS, and Akamai. The ideal candidate will have strong knowledge of web protocols, application security principles, and the ability to analyze web traffic logs to identify suspicious behavior and troubleshoot traffic-related issues.

Key Responsibilities

• Monitor, analyze, and mitigate malicious bot activity impacting web applications and services.
• Design, implement, and support web traffic routing strategies across enterprise environments.
• Configure and maintain Web Application Firewall (WAF) policies to protect critical applications.
• Analyze web server and application logs to identify security threats, performance issues, and abnormal traffic patterns.
• Interpret and troubleshoot HTTP status codes and application responses.
• Manage and optimize traffic delivery through Akamai Content Delivery Network (CDN).
• Support domain management and DNS-related configurations within Akamai environments.
• Configure, maintain, and troubleshoot F5 load balancers and traffic management solutions.
• Partner with application, infrastructure, and security teams to improve application availability and security posture.
• Implement security best practices within AWS-hosted applications and services.
• Investigate security incidents related to web applications, automated traffic, and routing infrastructure.
• Develop monitoring, alerting, and reporting capabilities for bot detection and web traffic analysis.

Required Qualifications

• 3+ years of experience supporting web applications, web servers, or application security platforms.
• Strong understanding of HTTP and HTTPS protocols.
• Hands-on experience with Web Application Firewalls (WAF).
• Experience analyzing web server logs and application logs.
• Ability to identify, interpret, and troubleshoot HTTP response codes and traffic anomalies.
• Knowledge of application security concepts, including OWASP Top 10 and common web application vulnerabilities.
• Experience supporting production web environments and internet-facing applications.
• Strong troubleshooting and analytical skills.

Preferred Qualifications

• Experience with F5 Load Balancers (LTM, GTM, ASM/Advanced WAF).
• Experience with AWS cloud services and cloud networking.
• Experience administering or supporting Akamai CDN solutions.
• Familiarity with bot management and automated traffic mitigation platforms.
• Experience with DNS, domain registration, and traffic routing concepts.
• Knowledge of scripting or automation tools such as Python, Bash, or PowerShell.
• Security certifications such as Security+, AWS Security Specialty, GIAC, or similar.