Web Application Firewall Engineer

Lightology

Web Application Firewall Engineer at Lightology ensuring security throughout the SDLC for web applications. Focused on vulnerability management, secure coding standards, and web application firewalls.

Posted 7/21/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $100,000 - $120,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security, including secure software development practices and vulnerability assessments, while effectively collaborating with development teams to enhance security measures throughout the Software Development Lifecycle.

Highest-signal resume keywords

Application Security (AppSec)Web Application SecuritySecure Software Development PracticesOWASP Top 10Web Application Firewalls (WAF)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentThreat ModelingApplication Security TestingSecure SDLCRemediation Techniques

Soft Skills

CollaborationCommunication

Tools & Technologies

Barracuda WAFCI/CD PipelinesDevSecOps

Industry Keywords

Application Security VulnerabilitiesSecure Coding StandardsSecurity Documentation

Tech Stack

Tools & technologies

FirewallsSDLC

About the role

Key responsibilities & impact

Embed security throughout the Software Development Lifecycle (SDLC).
Perform web application vulnerability assessments, penetration support, and threat modeling activities.
Identify, prioritize, and remediate application security vulnerabilities.
Implement secure coding standards aligned with OWASP Top 10 and industry best practices.
Configure and maintain Web Application Firewalls (WAF) and application security controls particularly with Barracuda WAF.
Monitor application logs and investigate security events affecting web applications and APIs.
Collaborate with software developers and DevOps engineer to improve application security posture.
Develop security documentation, technical recommendations, and remediation guidance.

Requirements

What you’ll need

Experience in Application Security (AppSec), Web Application Security, or Product Security.
Strong knowledge of secure software development practices and Secure SDLC.
Experience performing vulnerability assessments, threat modeling, and application security testing.
Knowledge of OWASP Top 10, common web application vulnerabilities, and remediation techniques.
Experience implementing or supporting Web Application Firewalls (WAF).
Experience integrating security into CI/CD pipelines and DevSecOps environments.

Benefits

Comp & perks

Health, Dental, and Vision Insurance enrollment on the 1st of the month after 30 days of employment.
401(k) Retirement plan after 6 months of employment
80 hours of accrued vacation time, prorated your first year
40 hours of Sick Time off annually, prorated your first year
Company Paid Holidays
Company-sponsored Life and AD&D Insurance Policy Coverage
Short Term, Long-Term Disability, Life, and AD&D optional Insurance benefits the 1st of the month after 30 days of employment