Senior Application Security Engineer

Enova Consulting

Senior AppSec Engineer developing security solutions for applications in a hybrid work environment at Enova Consulting based in Geneva.

Posted 4/26/2026full-timeGeneva • 🇨🇭 SwitzerlandSeniorWebsite

Tech Stack

Tools & technologies

FluxTCP/IP

About the role

Key responsibilities & impact

Design, deploy and configure application protection solutions (WAF, reverse proxy, load balancer)
Implement and fine-tune WAF policies (positive/negative models)
Manage advanced rule tuning and false positive reduction
Deploy protections against common web attacks (OWASP Top 10, injections, XSS, etc.)
Implement rate limiting and advanced protection strategies
Lead progressive production rollouts (monitoring -> blocking)
Secure HTTP/HTTPS traffic and manage TLS configurations on proxy/termination
Control and reduce the exposure surface of applications on the Internet
Contribute to traffic optimization (ports, access, filtering)
Ensure consistency of L4/L7 configurations (load balancing, health checks, session persistence)
Implement IP reputation-based filtering mechanisms
Leverage threat intelligence feeds to strengthen protections
Manage exceptions (allowlist), limit false positives and maintain rule quality
Contribute to vulnerability management related to application exposure
Participate in log analysis and security incident investigations
Document configurations, maintain standards and ensure traceability
Collaborate with network, security and application teams

Requirements

What you’ll need

Degree or background in computer science or cybersecurity
Proven experience in application security with a strong focus on protection
Solid expertise in WAF solutions (configuration, tuning, operation)
Strong knowledge of protection architectures: reverse proxy, load balancer
Excellent understanding of web protocols (HTTP/HTTPS, TLS, headers, cookies)
Good grasp of network concepts (TCP/IP, ports, NAT, stateful filtering)
Experience securing Internet-facing applications
Ability to configure, optimize and maintain security solutions in production
Knowledge of web attack techniques (OWASP, exploitation, attack vectors)
Experience in threat intelligence and dynamic filtering
Basics of automation (scripting, APIs, Git)
French: excellent written and spoken
English: professional level

Benefits

Comp & perks

Remote work: 2 days per week (3 days on site)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

WAF solutionsapplication securityreverse proxyload balancerHTTPHTTPSTLSTCP/IPscriptingAPIs

Soft Skills

collaborationcommunicationleadershipproblem-solvingdocumentationanalytical thinkingattention to detailincident investigationvulnerability managementrule quality maintenance

Certifications

degree in computer sciencedegree in cybersecurity