Web Application Firewall (waf) Cybersecurity Jobs

1 job found

Today

IT Application Security Consultant

New Wave People Manhattan, NY

Manhattan, NY

Today

$51 - $52/hr Full time Application Security Application Security Engineering Application Security Testing

Apply Now

Job Description

New Wave People is hiring an IT Application Security Consultant for an onsite role in Manhattan, NY. This is an on-premises consulting position focused on helping product teams strengthen application security across the SDLC and DevOps, with an emphasis on WAF-driven protections for high-value, cloud-hosted, externally facing applications.

You will provide security expertise spanning assessments, secure architecture reviews, and operational governance, while also supporting onboarding, configuration, tuning, and monitoring across Akamai and Cloudflare WAF platforms.

Core responsibilities

Deliver specialized security guidance to product teams, product owners, infrastructure, and cybersecurity leadership.
Improve application security throughout the SDLC and DevOps using assessments, secure architecture reviews, tooling optimization, and operational governance.
Onboard, configure, tune, and monitor protections across Akamai and Cloudflare WAF, supporting consistent security coverage for high-value and externally exposed applications.
Conduct technical assessments that enable development teams through tooling support and coaching, and help establish repeatable processes, metrics, and governance.
Perform other reasonably related duties as required.

Required experience and skills

Cloudflare WAF: 5+ years hands-on experience with policies, rulesets, firewall rules, bot management, DNS, DDoS, and logpush.
Akamai WAF: 4+ years hands-on experience with KSD/Property Manager, Bot Manager, Edge DNS, and log staging/testing.
Deep understanding of OWASP Top 10, application security principles, and secure development practices.
5+ years experience with SAST/DAST/SCA tools such as Checkmarx, BurpSuite, Fortify, or equivalents.
Experience analyzing HTTP traffic, including headers and payloads, and mapping attack vectors such as XSS, SQLi, RCE, deserialization, CSRF, SSRF, and similar threats.
Experience with cloud platforms (Azure, AWS, SaaS) and modern application architectures.
Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR, and cloud logs to build dashboards and metrics.

Relevant technologies

Cloudflare WAF (policies, rulesets, firewall rules, bot management, DNS, DDoS, logpush)
Akamai WAF (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing)
OWASP Top 10
SAST, DAST, SCA (including Checkmarx, BurpSuite, Fortify)
HTTP, SIEM, SOAR
Akama iWAF log staging/testing, Akamai WAF KSD/Property Manager, Cloudflare WAF rulesets, Cloudflare WAF firewall rules, Cloudflare WAF policies

Onsite schedule and notes

Onsite requirement: M-F, 37.5 hours weekly
0.30 minute unpaid lunch break
No holiday work, no overtime, no travel required
No parking provided

Location: Manhattan, NY (onsite). Salary: USD 51 to 52 per hour. Minimum experience: 4 years.

View full job page →

Get Web Application Firewall (waf) Cybersecurity Jobs alerts

New Web Application Firewall (waf) Cybersecurity Jobs, daily.