Information Security Engineer

We are seeking an experienced Information Security Engineer to join the Inbound Web Application Security Engineering Team. In this role, you will help secure internet-facing applications by designing, implementing, and supporting Layer 7 web security controls across a large-scale enterprise environment. You will work closely with application teams, infrastructure engineers, and security stakeholders to ensure the confidentiality, integrity, and availability of web-based services.

This position is ideal for a security professional with deep expertise in web application security, strong troubleshooting skills, and experience operating in complex enterprise environments. Responsibilities

• Design, configure, and support Layer 7 web security controls for internet-facing applications.
• Implement and manage security technologies including:
• Web Application Firewalls (WAF)
• Rate limiting controls
• Bot protection and mitigation
• Geographic access controls
• Client allow/block lists
• Mutual TLS (mTLS)
• SSL/TLS certificate management
• Analyze and resolve complex security incidents, system issues, and application access challenges.
• Collaborate with cross-functional engineering, infrastructure, and application teams to improve security posture and operational reliability.
• Support DNS, load balancing, firewall policies, and network traffic management related to HTTP/S applications.
• Perform root cause analysis and recommend solutions for security and performance-related issues.
• Participate in enterprise change management processes and ensure compliance with security standards and policies.
• Contribute to large-scale security initiatives and continuous improvement efforts across the organization.
• Work within an Agile product delivery model utilizing Jira and Kanban methodologies.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• 4+ years of experience in Information Security Engineering, cybersecurity, or a related technical field.
• Experience implementing and supporting web application security technologies.
• Strong understanding of:
• HTTP/HTTPS protocols
• Web application architectures
• Web security principles and controls
• DNS and networking fundamentals
• Firewall policies and traffic management
• Experience troubleshooting complex multi-tier enterprise systems.
• Experience working with enterprise change management processes.
• Experience using Jira, Kanban, or other Agile project management methodologies., * Experience securing large-scale internet-facing applications.
• Knowledge of application delivery technologies, load balancing, and traffic management solutions.
• Experience with certificate lifecycle management and mTLS implementations.
• Strong analytical, problem-solving, and communication skills.
• Ability to work effectively across technical and business teams in a fast-paced environment.

What You’ll Bring

• A security-first mindset with a passion for protecting critical applications and services.
• Strong technical depth in web application security and infrastructure technologies.
• The ability to navigate ambiguity, prioritize effectively, and deliver solutions at scale.
• A collaborative approach to problem solving and stakeholder engagement.

Primary Location: Charlotte, NC Contract Duration: 24 Months Work Authorization: Must be authorized to work in the United States without sponsorship restrictions, if applicable.