WAF Engineer

Skills

• Bachelor’s degree in Computer Science Computer Engineering Technology Information Systems (CIS/MIS) Engineering or related technical discipline or equivalent experience/training • 3 years of technology experience with a focus on information security technology development and administration web app development or web application pen testing

Description

• The Web Application Security team collaborates with application owners, architects, and developers in order to integrate security tools such as web application firewalls and bot mitigation to protect American Airlines websites and mobile apps.
• This team also collaborates with corporate security fraud teams, privacy teams, and incident response teams in investigations related to websites. This individual is responsible for the analysis, design, implementation, and maintenance of the automation tasks for our product.
• This individual is also responsible for collaborating with application owners and security vendors to update/tune Web Application Firewall (WAF) and bot mitigation security policies.

Responsibilities

• • Master’s degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training
• • 5+ years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing.
• • CISSP, CISM, CISA, GIAC or other security certifications are desired.
• • Strong technical background with Akamai Web Application Firewall (WAF) and bot mitigation security policies
• • Experience working with Akamai performance and security tools.

Educational Requirements

• • Solid comprehension of HTTP protocol and demonstrated ability to troubleshoot using HTTP logs and Splunk or other analytics tools
• • Strong technical background in web development and familiarity with potential attack vectors/methods
• • Strong technical background in scripting languages (Python, PowerShell, or JavaScript)
• • Basic understanding of DNS, Networks, Firewalls, SSL Certificates
• • Working understanding of Agile Framework
• • Self-motivated learning, good attitude