> Markdown version of [/jobs/ext/3617582-security-engineer-waf-api-security](https://www.wearedevelopers.com/jobs/ext/3617582-security-engineer-waf-api-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer, WAF & API Security

- **Company:** The Real Estate
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $190,000.0 - $210,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Amazon Cloudfront, Application Layers, Software as a Service, Cloud Computing, Cloud Engineering, IP Routing, Python (Programming Language), Open Web Application Security, Akamai, Zero Trust Network Access, Policy as Code, Cloud-native Network Functions (CNF), Istio, Software Security, Amazon Virtual Private Cloud (VPC), Kubernetes, Cloudflare, Api Gateway, Terraform, Ddos
- **Published:** October 8, 2026
- **Apply:** https://www.thejobnetwork.com/job/1bfe43cb-6a0a-4277-84f8-1ac7ad2bf9b8/security-engineer-waf-api-security

## About the Role

* Computer science background or equivalent software engineering foundation; you build and automate, you don't just configure
\n

 * 7+ years in application, cloud, or product security, with strong hands-on Layer 7 experience
\n

 * Deep WAF experience at scale (AWS WAF, Cloudflare, Akamai, Imperva, or comparable) plus API security
\n

 * Bot mitigation and protection against OWASP Top 10, DDoS, credential stuffing, and API abuse
\n

 * Hands-on AWS depth, working knowledge of GCP, and comfort with CloudFront, ALB, API Gateway, and Web ACLs
\n

 * Strong scripting and automation in Python
\n

 * Cloud network fundamentals: VPC design, segmentation, route tables, and security groups
\n

 * Terraform and a policy-as-code approach
\n

 * Fintech, SaaS, or cloud-native background preferred
\n

 * Exposure to ZTNA or Zscaler and modern segmentation is a plus
\n

 * Familiarity with Kubernetes networking and service mesh is a plus

## Description

You are a software engineer who specializes in security. This role owns Layer 7 defense for a cloud-native fintech environment: WAF, API security, and bot protection for customer-facing applications running across AWS and GCP. You will design and tune the controls, write the automation behind them, and partner closely with the platform and product teams who ship the apps you protect. You will also help secure the cloud network fabric that carries the traffic and contribute to a growing zero trust program, but the core of the job is application and edge security, built and operated by someone who codes.