Security Engineer - WAF/DAST

The Security Engineer is responsible for implementing, operating, and supporting security controls across network, cloud, endpoint, and security operations environments. This role is highly hands-on, with a strong emphasis on incident response, vulnerability remediation, automation, and L2/L3 support.

The Security Engineer partners closely with infrastructure, cloud, DevOps, and security teams to ensure secure, scalable operations.

What You Will Do

Serve as an SME across multiple security domains (network security, cloud security, vulnerability management, SecOps)

Perform L2/L3 security incident triage, investigation, and resolution

Execute routine operational support and maintenance for security tools and controls

Implement, review, and validate firewall rules, security configurations, and access controls

Conduct vulnerability scanning, reporting, remediation coordination, and validation

Support security tooling such as SIEM, EDR, firewalls, WAF, VPN, and monitoring platforms

Automate operational and security workflows using scripting and APIs

Create and maintain SOPs, playbooks, and operational documentation

Provide status updates for incidents, operational issues, and security initiatives

Participate in on-call rotations and support escalations as needed

Review systems periodically to ensure compliance and adherence to security standards

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global’s Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field
• 5+ years of experience in security engineering, network security, or security operations
• Strong experience across network security technologies (firewalls, VPN, IPS, WAF)
• Hands-on experience with vulnerability management (Qualys, VAPT, Nessus, etc.)
• Experience with SIEM tools (Splunk or equivalent) and security operations workflows
• Proficiency in scripting and automation (Python preferred)
• Working knowledge of cloud security concepts, especially AWS and/or Azure
• Experience troubleshooting operating systems, networking, and security tools
• Strong analytical mindset and documentation skills
• Comfortable working in shift-based or on-call environments - Experience with cloud security engineering (AWS, Azure)
• Exposure to container or DevOps security (Docker, Kubernetes)
• Familiarity with NIST, ISO, or ITIL frameworks
• Experience with SOAR platforms or security automation
• Security certifications (ISC2, CEH, Security+, etc.)
• Prior experience supporting enterprise or regulated environments