Web Application Security Engineer

Job description

Web Application Security Engineer 100% (m/f/d)

Tasks

• Review new or changed requirements and assess their reliability and their impact on the surrounding systems, standards and guidelines
• Troubleshoot technical issues related to WAF and initiate actions to resolve as part of 2nd and 3rd level support organization and participate in on-call rotation
• Continuous improvement of service reliability, security, performance, monitoring and automation of the WAF infrastructure

Requirements

• Deep understanding of security best practices for web applications and APIs
• Solid understanding of web communication protocols such as HTTP, TLS, Websocket etc.
• Strong troubleshooting and structured problem solving skills
• Familiarity with the implementation of authentication and federation mechanisms such as SAML, OAuth and OIDC and FIDO
• Good technical basis for Linux operating systems and their command line tools
• Strong troubleshooting and structured problem solving skills
• Practical experience with the operation of WAF or reverse proxy solutions such as Nevis, FS, Airlock, Cloudflare or open source alternatives such as ModSecurity is a plus
• Experience in software development (Java, Spring Boot, React, Typescript) and operational experience with Kubernetes-based environments is a plus
• Team player, strong collaborator with the ability to take responsibility
• Willingness and ability to learn new skills
• Fluent in spoken and written German and English
• Higher professional education (Swiss Federal Diploma or higher education) or comparable certification (CISSP) with relevant practical experience is desirable

We offer

No explicit benefits mentioned.