Job Summary:
Manifest Solutions is currently seeking a Senior Web/Network Security Engineer for an onsite position in Columbus, OH. The role involves designing, implementing, and supporting web application and network security solutions, ensuring the security of internet-facing applications, and collaborating with development teams for application onboarding and troubleshooting.
Responsibilities:
โข Design, implementation, and support of enterprise web application and network security solutions.
โข Responsible for securing internet-facing applications through F5 Distributed Cloud WAF, API security, bot protection, and network security technologies including Palo Alto firewalls and secure remote access solutions.
โข Administer and support F5 Distributed Cloud (XC) WAF platform.
โข Deploy and maintain WAF policies, signatures, and security controls.
โข Configure: API Protection, Bot Defense, DDoS Mitigation, Geolocation Policies, Rate Limiting, CAPTCHA Challenges
โข Investigate and tune false positives.
โข Perform application onboarding into WAF services.
โข Conduct WAF policy reviews and optimization.
โข Support incident response involving web application attacks.
โข Understand and mitigate: OWASP Top 10, Authentication attacks. API abuse, Credential stuffing, Session hijacking, Cross-Site Scripting (XSS), SQL Injection, SSRF, CSRF.
โข Review application architectures and recommend security improvements.
โข Partner with development teams during application onboarding and troubleshooting.
โข Network Security Administer and support: Palo Alto Networks, NGFW Prisma, Access Site-to-site VPNs, SSL decryption, NAT and security policies, Network segmentation, DNS and routing troubleshooting.
โข Support production incidents and participate in on-call rotation.
โข Develop automation using: Python REST APIs, Terraform, Git.
โข Build dashboards and reporting around security posture.
โข Automate repetitive operational tasks.
โข Participate in: Incident response, Threat hunting, Security assessments, Vulnerability remediation, Root cause analysis, Architecture reviews
Preferred:
โข Bot Management
โข API Security
โข DDoS Protection
โข CDN technologies
โข DevSecOps
โข CI/CD pipelines
โข Kubernetes
โข Containers
โข Terraform
โข Certifications: OWASP Foundation certifications, ISC2 CISSP, GIAC certifications, F5 certifications, Palo Alto Networks certifications
Company:
Manifest Solutions is an information technology company specializing in IT consultancy services. Founded in 1994, the company is headquartered in Arlington, USA, with a team of 51-200 employees. The company is currently Growth Stage.