Senior Application Security Engineer

Enova Consulting

Senior Application Security Engineer at Enova Consulting in Genève, specializing in web application security and WAF solutions for critical projects.

Posted 4/12/2026full-timeGenève • 🇨🇭 SwitzerlandSeniorWebsite

Tech Stack

Tools & technologies

FluxTCP/IP

About the role

Key responsibilities & impact

Application protection & WAF (core of the role 🔥)
Design, deploy and especially configure application protection solutions (WAF, reverse proxy, load balancer).
Implement and refine WAF policies (positive/negative models).
Manage advanced rule tuning and reduce false positives.
Deploy protections against common web attacks (OWASP Top 10, injections, XSS, etc.).
Implement rate limiting and advanced protection strategies.
Lead progressive production rollouts (monitoring mode → blocking).
Secure HTTP/HTTPS traffic and manage TLS configurations on proxy/termination.
Control and reduce application exposure surface on the Internet.
Participate in traffic optimization (ports, access, filtering).
Ensure consistency of L4/L7 configurations (load balancing, health checks, persistence).
Implement IP reputation-based filtering mechanisms.
Leverage threat intelligence feeds to strengthen protections.
Manage exceptions (allowlisting), limit false positives and maintain rule quality.
Contribute to vulnerability management related to application exposure.
Participate in log analysis and security incident investigations.
Document configurations, maintain standards and ensure traceability.
Collaborate with network, security and application teams.

Requirements

What you’ll need

Degree in computer science or cybersecurity, with proven experience in application security and a strong focus on protection.
Solid expertise with WAF solutions (configuration, tuning, operation).
Strong knowledge of protection architectures: reverse proxy, load balancer.
Excellent understanding of web protocols (HTTP/HTTPS, TLS, headers, cookies).
Good grasp of networking concepts (TCP/IP, ports, NAT, stateful filtering).
Experience securing Internet-facing applications.
Ability to configure, optimize and maintain security solutions in production.
Knowledge of web attack techniques (OWASP, exploitation, attack vectors).
Experience in threat intelligence and dynamic filtering.
Basic automation skills (scripting, APIs, Git).

Benefits

Comp & perks

Remote work: 2 days per week (3 days on-site)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

WAFapplication protection solutionsreverse proxyload balancerWAF policiesrate limitingTLS configurationsIP reputation-based filteringlog analysisscripting

Soft Skills

collaborationleadershipproblem-solvingcommunication

Certifications

degree in computer sciencedegree in cybersecurity