Principal WAF Engineer

Profile

Join our Talent Network
CBRE Vantage
Find out more at: ****JOB SUMMARY
We’re looking for a dynamic and highly-motivated individual that is seeking a position with the global leader in commercial real estate services. This candidate will develop, maintain, test, and troubleshoot cloud web application firewalls and rulesets. The ideal candidate should have hands on experience with cloud web application firewalls at all of the major cloud services providers based in the US, Amazon, Azure, and Google. Experience with Alibaba Cloud would be considered a plus.
Candidates should have experience with web-based attacks, OWASP Top 10 web vulnerabilities, web application testing with tools like Zed Attack Proxy, and extensive knowledge of networking protocols.
RESPONSIBILITIES
Develop or select WAF rulesets
Test the effectiveness of WAF rulesets
Maintain and enhance WAF rulesets
Work with development teams to troubleshoot WAF rulesets and applications’ interactions with them
Deploy, configure and maintain cloud native web application firewalls including:
Logging of all WAF events
Responding to WAF events
Developing WAF incident response plans
Updating threat models based on WAF event patterns
Mentor and provide guidance to other WAF engineers and leadership
QUALIFICATIONS
Bachelor’s degree (BA/BS) or master’s degree in related field of work.
Industry related certifications preferred such as CCSP, CCSS or cloud specific certifications
Demonstrated experience with cloud based WAF in AWS and/or Azure.
Strong systems engineering skills with an emphasis on network architecture.
5 to 7 years’ experience of advanced knowledge in security, application security, and network security.
Ability to positively engaged with the business at all levels
Ability to troubleshoot complex problems, manage and resolve in a timely manner.
Ability to manage conflicting priorities effectively.
Strong communication and conceptual skills with desire to share knowledge and cross-train.
Proven ability to meet tight deadlines.
Knowledge of open source, open standards, and modern application security standards.
DESIRABLE KNOWLEDGE & SKILLS
Experience with version control software
Familiarity with pull request style software development
Experience with automation technologies such as Chef or Ansible
Understanding or experience with Infrastructure as Code such as Terraform
Ability to write code to automate testing processes with a tool like Selenium, or ZAP
YOUR INTERESTS
You are passionate about improving web and cloud application security
You are looking to be a part of a cutting edge, highly visible, and impactful project for an industry leading global company
You love working with other highly talented and passionate architects and leaders
US Company Profile
About CBRE (NYSE: CBRE): At CBRE, you are empowered to take your career path into your own hands. Enjoy workplace flexibility in a global organization with tremendous scale. Work in an inclusive and collaborative environment with supportive teammates. Come experience the employee advantage at CBRE.
CBRE has a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.
As a Fortune 500 worldwide leader in real estate services, CBRE’s more than 90,000 professionals provide exceptional outcomes for clients in over approximately 480 offices worldwide.  When it comes to real estate, CBRE sees potential everywhere. We turn scale into strength, expense into performance, and property into prosperity. Visit cbre.us.

Company info

Sign Up Now - WashingtondcCrossing.com