Senior Cloud Security Engineer

IS3 Solutions is seeking a Senior Security Engineer to serve as the technical owner for their Cloudflare security platform. The role involves managing various security features such as Cloudflare WAF, Secure DNS, and DDoS Protection, while ensuring effective application onboarding and security policy management.

Responsibilities:

• Serve as the technical owner for our Cloudflare security platform, including Cloudflare WAF, Secure DNS, DDoS Protection, Bot Management, Rate Limiting, SSL/TLS and Certificate Management, Application Onboarding
• Hands-on administration of Cloudflare Enterprise
• Onboard applications and create WAF policies
• Tune WAF rules and handle false positives
• Perform DNS migrations and work directly in the Cloudflare console

Requirements:

• Hands-on administration of Cloudflare Enterprise
• Cloudflare WAF
• Cloudflare DNS
• DNS migrations and DNS cutovers
• Cloudflare DDoS controls
• Bot Management
• Rate Limiting
• Zone onboarding
• onboarded applications
• created WAF policies
• tuned WAF rules
• handled false positives
• performed DNS migrations
• worked directly in the Cloudflare console
• 5+ years administering Web Application Firewalls Acceptable platforms include: Cloudflare, Imperva, F5, Akamai, Fortinet, Azure WAF
• Strong understanding of HTTPS
• Strong understanding of TLS / SSL
• Strong understanding of DNS
• Strong understanding of OWASP Top 10
• Strong understanding of Reverse proxies
• Strong understanding of Web Applications
• Strong understanding of API Security
• Must be able to troubleshoot SQL Injection
• Must be able to troubleshoot XSS
• Must be able to troubleshoot Bot activity
• Must be able to troubleshoot False positives
• Must be able to troubleshoot Application onboarding issues
• Terraform
• Infrastructure as Code
• CI/CD integration
• GitHub
• GitLab
• Microsoft Sentinel
• Azure
• AWS