Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Выше рынка
$138к-297к/год
$130к$160кмедиана$200к
По похожим ролям (50) ~ $160к/год
86
Хорошая вакансия
развернуть
Чётко описанная роль в крупной e-commerce-компании сочетает широкий практический опыт и зарплату выше рыночного ориентира. Главный нюанс - большой разброс требований к опыту и возможное несоответствие уровня Staff минимальным четырём годам.
Кликните для подробной информации
Разброс по опытуАктуальная безопасностьВыше рынкаХорошие льготы
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Web Security Engineer (Cybersecurity): Designing and operating web and API security controls for a large-scale e-commerce platform with an accent on WAF detection, bot defense, DDoS mitigation, and API security. Focus on threat hunting, analyzing SIEM and web telemetry, developing detection logic and automation, and responding to complex security incidents.
Location: Seattle, USA
Base salary: $138,000–$297,000 per year, depending on market location, skills, knowledge, and experience.
Company
hirify.global operates a large-scale e-commerce and technology platform focused on making shopping, eating, and living easier for customers.
What you will do
Design, deploy, and manage controls protecting externally facing web and API services.
Analyze and tune WAF detections, security policies, and responses to emerging vulnerabilities and CVEs.
Detect and mitigate malicious bot activity and strengthen DDoS defense capabilities.
Conduct proactive web threat hunting and investigate security incidents across large-scale environments.
Analyze SIEM data, security telemetry, access logs, and API security events to produce actionable insights.
Develop detection logic, playbooks, operational procedures, automation workflows, and response processes with engineering, infrastructure, and security teams.
Requirements
Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
At least 4 years of experience in security engineering or cybersecurity; 10+ years in web security, security operations, threat detection, incident response, or a related discipline is preferred.
Experience securing large-scale web environments, including DNS, WAF, CDN, DDoS mitigation, bot management, vulnerability response, and web security investigations.
Experience with SIEM and security analytics platforms such as Splunk, Elastic, AWS Athena, or similar tools, plus SQL-based analysis.
Proficiency in Python, JavaScript, Go, or Bash for automation and security engineering.
Strong knowledge of web application security, OWASP Top 10, MITRE ATT&CK, incident response, and cross-functional communication.
Nice to have
Cybersecurity certifications such as CISSP, GIAC, GSEC, GCIH, GCIA, or Security+.
Korean language proficiency.
Ability to travel internationally and maintain the necessary travel documentation.
Culture & Benefits
Opportunity to work across web, network, email, and endpoint security at significant scale.
Medical, dental, vision, life, AD&D, disability, FSA, and HSA benefits.
Annual bonus potential of 0–20% of base salary.
401(k) plan with company match, 18–21 days of paid time off, 12 paid holidays, and paid parental leave.
Pre-tax commuter benefits and free electric vehicle charging.
Hiring process
Application review, job fit interview, focus interview, and offer.
Interview schedules and results are communicated by email.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →