Назад
Company hidden
13 дней назад

Staff Web Security Engineer (Cybersecurity)

138 000 - 297 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Web Security Engineer (Cybersecurity): Designing and operating web and API security controls for a large-scale e-commerce platform with an accent on WAF detection, bot defense, DDoS mitigation, and API security. Focus on threat hunting, analyzing SIEM and web telemetry, developing detection logic and automation, and responding to complex security incidents.

Location: Seattle, USA

Base salary: $138,000–$297,000 per year, depending on market location, skills, knowledge, and experience.

Company

hirify.global operates a large-scale e-commerce and technology platform focused on making shopping, eating, and living easier for customers.

What you will do

  • Design, deploy, and manage controls protecting externally facing web and API services.
  • Analyze and tune WAF detections, security policies, and responses to emerging vulnerabilities and CVEs.
  • Detect and mitigate malicious bot activity and strengthen DDoS defense capabilities.
  • Conduct proactive web threat hunting and investigate security incidents across large-scale environments.
  • Analyze SIEM data, security telemetry, access logs, and API security events to produce actionable insights.
  • Develop detection logic, playbooks, operational procedures, automation workflows, and response processes with engineering, infrastructure, and security teams.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
  • At least 4 years of experience in security engineering or cybersecurity; 10+ years in web security, security operations, threat detection, incident response, or a related discipline is preferred.
  • Experience securing large-scale web environments, including DNS, WAF, CDN, DDoS mitigation, bot management, vulnerability response, and web security investigations.
  • Experience with SIEM and security analytics platforms such as Splunk, Elastic, AWS Athena, or similar tools, plus SQL-based analysis.
  • Proficiency in Python, JavaScript, Go, or Bash for automation and security engineering.
  • Strong knowledge of web application security, OWASP Top 10, MITRE ATT&CK, incident response, and cross-functional communication.

Nice to have

  • Cybersecurity certifications such as CISSP, GIAC, GSEC, GCIH, GCIA, or Security+.
  • Korean language proficiency.
  • Ability to travel internationally and maintain the necessary travel documentation.

Culture & Benefits

  • Opportunity to work across web, network, email, and endpoint security at significant scale.
  • Medical, dental, vision, life, AD&D, disability, FSA, and HSA benefits.
  • Annual bonus potential of 0–20% of base salary.
  • 401(k) plan with company match, 18–21 days of paid time off, 12 paid holidays, and paid parental leave.
  • Pre-tax commuter benefits and free electric vehicle charging.

Hiring process

  • Application review, job fit interview, focus interview, and offer.
  • Interview schedules and results are communicated by email.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →