Network Security Engineer (WAF)

Location: Hybrid, 3 days per week in Cincinnati, Ohio or Atlanta, Georgia, United States. Candidates must be US citizens or Green Card holders. The position is not eligible for visa sponsorship.

Company

hirify.global operates payment technology and services for businesses through global, distributed teams.

What you will do

• Operate and continuously improve WAF and edge security platforms focused on application, API, and bot protection.
• Configure and tune Akamai, Cloudflare, or comparable platforms, including WAF policies, managed and custom rules, rate limiting, bot controls, and security analytics.
• Onboard internet-facing applications and implement protections, exceptions, and allow/block controls.
• Analyze traffic, logs, HTTP transactions, application behavior, and security events to identify threats, false positives, and configuration issues.
• Troubleshoot WAF blocks, application access, TLS and certificate, DNS, proxy, load-balancing, and other edge security issues.
• Support incident response, operational documentation, runbooks, testing, peer review, rollback, change management, readiness exercises, and post-incident improvements.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information technology, networking, or a related field, or equivalent practical experience.
• 3–5 years of experience in network security, application security, edge security, security operations, infrastructure engineering, or a related role.
• Hands-on experience supporting WAF or application protection technologies, preferably Akamai, Cloudflare, or a comparable WAF/CDN platform.
• Experience with application onboarding, policy implementation, traffic analysis, rule tuning, exception handling, troubleshooting, and false-positive reduction.
• Working knowledge of TCP/IP, HTTP/S, TLS and certificates, DNS, proxies, load balancing, NAT, routing, and CDN or edge security concepts.
• Ability to analyze logs, HTTP transactions, application behavior, and security events to investigate and resolve technical issues.
• Strong problem-solving and communication skills, ability to work across distributed teams, follow change-management processes, and participate in a rotating on-call schedule.
• Must be a US citizen or Green Card holder; visa sponsorship is not available now or in the future.

Nice to have

• Experience with Akamai or Cloudflare application, API, or bot protection capabilities.
• Familiarity with Terraform, Python, REST APIs, Git, CI/CD pipelines, or other security automation tools.
• Experience with SIEM platforms, dashboards, alerts, or reporting for WAF and edge security events.
• Familiarity with the OWASP Top 10, API abuse, credential attacks, automated threats, or application-layer denial-of-service patterns.
• Exposure to SASE, secure web gateways, Zscaler, Prisma Access, Palo Alto, F5 Distributed Cloud, DDoS protection, or load-balancing technologies.
• Experience in a regulated or highly available enterprise environment, or certifications such as Security+, CCNA, Akamai, Cloudflare, GIAC, Palo Alto, or Zscaler.

Culture & Benefits

• Hybrid work requires three days per week in the Cincinnati or Atlanta office.
• Participation in a rotating on-call schedule covering weekday and weekend incidents affecting WAF, edge security, application protection, or related network security services.
• Work with application, security, network, infrastructure, vendor, and distributed partner teams.
• Inclusive, collaborative, and innovation-focused working environment.
• Equal opportunity employment and reasonable accommodations during hiring and employment.