ZTNA Engineer

APN Consulting, Inc. is a progressive IT staffing and services company offering innovative business solutions to improve client business outcomes. We focus on high-impact technology solutions in ServiceNow, Fullstack, Cloud & Data, and AI/ML.

About the role

The Application Security Engineer will ensure the effective deployment, configuration, and maintenance of systems for global customers. This role requires expertise in Web Application Firewalls, Zero Trust Proxy, Cloud security, alerts and detections, and data log analysis. The position is part of the Application Edge Protection Service within the CyberSecurity pillar.

Responsibilities

• Deploy, configure, and maintain web application firewall systems to protect web applications against threats and vulnerabilities.
• Deploy, configure, and manage Zero Trust Proxy systems, including defining and maintaining policies and connectors.
• Monitor and analyze security events, alerts, and logs; investigate and respond to potential security incidents in collaboration with the Security Operations Center (SOC) and other Cybersecurity teams.
• Develop and maintain detection rules, alerts, and reports to proactively identify and mitigate risks using logs; provide investigation findings to relevant business units.
• Collaborate with infrastructure and application teams to integrate web application firewalls with CDNs such as Akamai and Radware.
• Utilize WAF data to identify vulnerabilities and recommend remediation measures to customers.
• Maintain accurate documentation of WAF configurations, policies, and procedures; prepare reports and metrics related to web application security.
• Explain security details to non-security teams (e.g., application and engineering teams) and collaborate across functions to align security objectives.
• Provide guidance on application security best practices and security awareness.
• Implement automation processes using Python, Terraform, AI, and cloud-native concepts (AWS, Azure, Google Cloud).

Requirements

• Bachelor’s Degree or equivalent experience in Information Security, Information Technology, Computer Science, Engineering, or related field.
• 4+ years of experience, with a minimum of 2 years in network security and 2 years in application security.
• Knowledge of Web Application Firewall technologies (e.g., Akamai).
• Knowledge of Zero Trust framework and technologies, including integration with WAF.
• Familiarity with cloud security services, concepts, and best practices (AWS, Azure, GCP).
• Experience with Infrastructure as Code (Terraform) and automation using Python.
• Understanding of ethical hacking, ServiceNow, and technical documentation.
• CISSP, CISM, CISA, GIAC, or other security certifications are desired.
• Familiarity and comfortability using AI tools.

Skills

• Strong knowledge of web application security concepts, OWASP Top 10 vulnerabilities, and mitigation techniques.
• Understanding of authentication and authorization flows (OAuth, SAML, OIDC).
• Technical background with Web Application Firewall (WAF), Zero Trust Network Access, APIs, and Cloud security policies.
• Understanding of API security issues and API authentication.
• Experience in a Security Operations Center (SOC) or performing cybersecurity analysis, log analysis, and threat detection.
• Good understanding of information security principles and policy enforcement.
• Solid comprehension of HTTP protocol and ability to troubleshoot using HTTP logs.
• Technical background in web development and familiarity with potential attack vectors/methods.
• Understanding of Authentication, DNS, Networks, Firewalls, and SSL Certificates.
• High degree of personal integrity and ethics with a passion for cybersecurity.
• Excellent written and oral communication skills for technical and business audiences.
• Advanced critical thinking, problem-solving, and technical troubleshooting abilities.
• Ability to operate in a dynamic, evolving environment and meet aggressive timeframes.
• Strong analytical skills with high attention to detail and accuracy.
• Ability to thrive in a complex, fast-paced technology or information security organization within a large enterprise environment.
• Bilingual skills (e.g., English, Spanish, Japanese) are a plus.

Location: Remote (available for candidates located in EST and CST time zones). Job Type: Contract.