> Markdown version of [/jobs/ext/2578389-network-security-engineer-waap](https://www.wearedevelopers.com/jobs/ext/2578389-network-security-engineer-waap). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Security Engineer WAAP - **Company:** Centillion Infotech - **Location:** Dallas, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Application Firewall, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cloud Engineering, Cyber Security, Continuous Integration, Data Centers, DDoS Mitigation, Network Address Translation, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Virtual Private Networks (VPN), Multi-protocol Systems, Network Security, NetFlow, Network Monitoring, Routing, Open Shortest Path First (OSPF), Open Web Application Security, Performance Tuning, Akamai, Zero Trust Network Access, Security Information and Event Management, SQL Injection, Systems Integration, TCP/IP, Traffic Analysis, WAN Optimization, Web Applications, Transport Layer Security, Google Cloud, Load Balancing, In-Plane Switching (IPS), System Availability, Software Security, Cyber Threat Analysis, Firewalls (Computer Science), Cross-Site Scripting (XSS), Juniper, Information Technology, Palo Alto Networks, Fortinet, Cloud Integration, Devsecops, Microservices - **Published:** August 22, 2026 - **Apply:** https://www.dice.com/job-detail/07d26f5a-4a9e-4423-a8b5-cbe5656a99b5 ## About the Role * 10+ years of experience in network security architecture, engineering, and operations. WAAP & Application Security Expertise (Mandatory) * Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted). * Deep understanding of: + OWASP Top 10 (Web & API) + Application-layer threats and mitigation techniques * Hands-on experience in: + WAF policy creation and tuning + API security controls (schema validation, authentication enforcement) + Bot mitigation strategies + DDoS protection architecture (L3 L7) * Experience in: + Traffic analysis (HTTP/HTTPS, TLS inspection) + Behavioral-based threat detection * Strong understanding of: + Secure application architectures (monolith, microservices, APIs) + DevSecOps integration and CI/CD security controls (nice to have) Network Security & Infrastructure * Strong hands-on experience in: + Firewalls (Fortinet, Palo Alto, Juniper) + IDS/IPS, VPN, SIEM * Expertise in: + Firewall policy design, NAT, routing, inspection, and threat prevention * Experience in designing secure: + Hybrid (on-prem + cloud + internet-facing) environments * Experience in: + Proxy architectures (forward/reverse) + Secure internet gateways Networking & Protocol Expertise * Strong knowledge of: + TCP/IP, DNS, HTTP/HTTPS, TLS/SSL + Routing protocols (BGP, OSPF, MPLS) * Experience with: + QoS, NetFlow, ACLs, NAT, IP traffic management + Network monitoring and analysis tools Cloud & Integration * Experience securing applications in: + AWS, Azure, Google Cloud Platform * Familiarity with: + Cloud-native WAF and API security tools * Integration experience with: + SIEM, EDR/XDR, IAM platforms Data Center & Enterprise Networking * Experience managing enterprise environments with: + Aruba, Arista, Juniper switches + Firewalls, load balancers, WAN optimization tools * Understanding of: + High availability and performance optimization for application traffic, * Bachelor's Degree in Computer Science, IT, or related field (or equivalent experience). * 10+ years of experience in enterprise network security and application security. * Preferred certifications: + CCNP / CCIE / JNCIE + Security certifications (CISSP, CISM) + Vendor certifications (Akamai, AWS Security, Azure Security) Key Differentiators (What This JD Targets) * Positions WAAP as a primary security control layer, not an add-on * Strong alignment with: + Application security + Network security convergence + Defense-in-depth strategy ## Description * Translate business and application security requirements into enterprise-grade WAAP and network security architectures. * Develop and support solutions aligned with HPE's application security and defense-in-depth strategy. * Lead architecture, design, and deployment of Web Application and API Protection (WAAP) solutions across global environments. * Develop and drive multi-year roadmap for application-layer security, including WAF, API security, bot protection, and DDoS mitigation. WAAP Responsibilities (Primary Focus) * Architect, implement, and manage WAAP platforms, including: + Web Application Firewall (WAF) + API Security (discovery, protection, runtime analysis) + Bot Management + DDoS Protection (L3 L7) * Design and deploy WAAP solutions using platforms such as: + Thales Imperva + Cloud-native WAFs (Azure, AWS WAF) or equivalent * Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications. * Perform false positive tuning, policy optimization, and rule lifecycle management. * Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats. * Integrate WAAP with: + SIEM/SOAR platforms + Identity providers + Threat intelligence feeds * Collaborate with application teams to: + Onboard applications into WAAP platforms + Perform security assessments and risk reviews + Ensure minimal performance impact while enforcing strong security controls * Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.). * Lead WAAP incident response and root cause analysis for application-layer attacks. * Define and track application security metrics and KPIs (attack trends, mitigation effectiveness). * Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards). Core Network Security Responsibilities * Architect and maintain secure network infrastructure across data center, campus, and cloud environments. * Conduct security design reviews ensuring compliance with enterprise security standards. * Provide risk reporting, control effectiveness, and security posture visibility. * Support internal and external security audits. * Manage and optimize Security Information and Event Management (SIEM) systems. * Develop and maintain network security policies and procedures. * Collaborate with cybersecurity, infrastructure, and application teams globally. ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [What the Heck is Edge Computing Anyway?](https://www.wearedevelopers.com/videos/593-what-the-heck-is-edge-computing-anyway) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)