Application Security Engineer (WAF / Edge Security)

Description

Summary: This Mid/Senior Software Engineer role focuses on assessing, implementing, and tuning WAF, bot management, and rate-limiting policies while developing governance artifacts. Highlights: 1. Opportunity to work with cutting-edge WAF/CDN platforms 2. Focus on perimeter security concepts and advanced controls 3. Collaborative role working with technical and leadership stakeholders Mid/Senior Software Engineer **Important Information** * Experience: \+5 years * Job Mode: Full\-time * Work Mode: Remote * ID:19755 ### **Job Summary** **Key Responsibilities** * Conduct an inventory of domains, endpoints, and associated WAF/CDN configurations across multiple business units. * Assess current\-state WAF, bot management, and rate‑limiting policies; identify gaps, inconsistencies, and risks. * Implement and tune WAF rules, rate‑limiting policies, bot‑management protections, and related edge‑security controls. * Develop governance artifacts including runbooks, onboarding processes, configuration standards, and monitoring guidelines. * Collaborate with platform teams and client engineering teams to deploy updates and ensure alignment with business operating hours. * Support ongoing perimeter hygiene, compliance checks, and policy drift remediation. **Required Experience** * Hands\-on experience with **Cloudflare**, **Fastly**, or similar WAF/CDN platforms. * Familiarity with perimeter security concepts (rate limiting, geo restrictions, bot management, edge logging/monitoring). * Ability to analyze and document complex distributed environments. * Strong understanding of secure application and API environments. * Solid communication skills and comfort working directly with technical and leadership stakeholders. **Nice to Have** * Experience with governance frameworks, compliance, or security operations. * Knowledge of AWS/Azure edge and security tools. * Ability to create automation or scripts to support configuration consistency. **Location** Nearshore (LATAM); alignment to U.S. business hours required.