Web Application Firewall Engineer

Lightology is the largest contemporary lighting showroom in North America. Our goal is to educate our customers on the intricacies of lighting design. With this knowledge, our customers come to appreciate the significant impact that great lighting design can have on their home, office, store, or restaurant. This knowledge, accompanied by a partnership with our staff and our exceptional product line gives our customers all the tools necessary to create an atmosphere uniquely suited to their needs.

www.Lightology.com

Position: Web Application Firewall Engineer

Position reports to the Chief Information Officer

Job Location: Remote

Job Type: Full-Time

Pay range : $100,000 - $120,000 Salary

Job Description

Lightology is seeking an experienced Web Application Firewall Engineer to manage and support our security on the web assets by integrating security throughout the software development lifecycle (SDLC) and protecting enterprise web applications from evolving cyber threats. The ideal candidate has experience with application security, secure software development, vulnerability management and DevSecOps

Key Responsibilities

• Embed security throughout the Software Development Lifecycle (SDLC).
• Perform web application vulnerability assessments, penetration support, and threat modeling activities.
• Identify, prioritize, and remediate application security vulnerabilities.
• Implement secure coding standards aligned with OWASP Top 10 and industry best practices.
• Configure and maintain Web Application Firewalls (WAF) and application security controls particularly with Barracuda WAF
• Monitor application logs and investigate security events affecting web applications and APIs.
• Collaborate with software developers and DevOps engineer to improve application security posture.
• Develop security documentation, technical recommendations, and remediation guidance.

• Experience in Application Security (AppSec), Web Application Security, or Product Security.
• Strong knowledge of secure software development practices and Secure SDLC.
• Experience performing vulnerability assessments, threat modeling, and application security testing.
• Knowledge of OWASP Top 10, common web application vulnerabilities, and remediation techniques.
• Experience implementing or supporting Web Application Firewalls (WAF).
• Experience integrating security into CI/CD pipelines and DevSecOps environments.

Benefits

• Competitive pay
• Health, Dental, and Vision Insurance enrollment on the 1st of the month after 30 days of employment.
• 401(k) Retirement plan after 6 months of employment
• 80 hours of accrued vacation time, prorated your first year
• 40 hours of Sick Time off annually, prorated your first year
• Company Paid Holidays
• Company-sponsored Life and AD&D Insurance Policy Coverage
• Short Term, Long-Term Disability, Life, and AD&D optional Insurance benefits the 1st of the month after 30 days of employment