Note: The job is a remote job and is open to candidates in USA. Hampton North is seeking a Security Engineer to own Layer 7 defense for a cloud-native fintech environment. The role focuses on designing, tuning, automating, and operating WAF, API security, bot protection, cloud network security, and zero trust controls across AWS and GCP while partnering with platform and product teams.
Responsibilities
- Own Layer 7 defense across the application edge: WAF, API security, bot management, and rate limiting against OWASP Top 10 and API abuse
- Design and tune WAF rule sets and Web ACLs, including managed and rate-based rules, across CloudFront, ALB, and API Gateway
- Build API security controls at the gateway: schema validation, authentication, throttling, and abuse detection
- Run bot mitigation and defend against DDoS, credential stuffing, and aggregator abuse for customer-facing apps
- Correlate WAF, bot, and load balancer telemetry for detection, and write the automation and tooling behind response in Python
- Secure the cloud network fabric that carries application traffic: VPC design, segmentation, route tables, and security groups across AWS and GCP
- Codify controls as policy-as-code in Terraform
- Contribute to the zero trust and ZTNA rollout and to securing Kubernetes networking as the environment scales
- Own initiatives from design through delivery and partner closely with platform and product teams
Skills
- • Computer science background or equivalent software engineering foundation; you build and automate, you don't just configure
- • 7+ years in application, cloud, or product security, with strong hands-on Layer 7 experience
- • Deep WAF experience at scale (AWS WAF, Cloudflare, Akamai, Imperva, or comparable) plus API security
- • Bot mitigation and protection against OWASP Top 10, DDoS, credential stuffing, and API abuse
- • Hands-on AWS depth, working knowledge of GCP, and comfort with CloudFront, ALB, API Gateway, and Web ACLs
- • Strong scripting and automation in Python
- • Cloud network fundamentals: VPC design, segmentation, route tables, and security groups
- • Terraform and a policy-as-code approach
- •No CTC or sponsorship at this time.•
- • Fintech, SaaS, or cloud-native background preferred
- • Exposure to ZTNA or Zscaler and modern segmentation is a plus
- • Familiarity with Kubernetes networking and service mesh is a plus
Benefits
- 20% annual cash bonus
- 100% remote within the US
Company Overview