Principal WAF Engineer

JOB SUMMARY

The mission of the individual in this role is to leverage their strong understanding of enterprise-level knowledge and/or expert knowledge to mitigate cyber security risk. They will actively work with the CBRE business, Digital & Technology and other partner organizations (Compliance, Risk Mgmt., Audit, & Legal) to seamlessly integrate security processes, tools, and people into the business culture providing a holistic security ecosystem, driving continuous improvements and seamless protection / monitoring capabilities globally. Leads and executes on complex initiatives that drive problem resolution. As a senior member on the team, this individual will work to build a progressive development team with a mindset toward being agile and solving problems iteratively.

Experience in all skills listed is not necessary to be qualified for the position. If you have relevant similar experience, we still want to talk to you. This is an application security role, not a network security role. Those without application security experience including HTTP request components, SSL configuration, application coding best practices, and related skills are not qualified to troubleshoot application issues with developers in this role.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Serve as a customer facing point of contact for the global WAF team
• Coordinate implementation of WAF infrastructure with CBRE application teams
• Deploy CBRE WAF standardized rulesets
• Work with CBRE application teams to troubleshoot WAF rulesets and applications interactions with them
• Deploy, configure, and maintain cloud native web application firewalls.
• Create project and implementation plans for team and customer efforts.
• Create WAF product documentation for internal usage.
• Provision WAF monitoring and reporting components on a per application basis.

SUPERVISORY RESPONSIBILITIES

• May lead members of a globally present DevOps team. Shape the direction of the team moving forward. May provide formal supervision to individual employees within single functional or operational area. May recommend staff recruitment, selection, corrective action and termination. May prepare and deliver performance appraisal for staff. May mentors and coach team members to further develop competencies. Leads by example and models behaviors that are consistent with the company's values.

EDUCATION and EXPERIENCE:

• Bachelor's degree (BA/BS) in a related field of work

oplus a minimum of 3 years related work experience; or equivalent combination of education and experience (equivalent work experience = 2 years’ of related experience for every year of higher level education).

• Industry related certifications preferred such as CCSP, CCSS or cloud specific certifications
• Demonstrated experience with cloud based WAF in Imperva, Akamai (current version, not just Kona), AWS and/or Azure.
• Demonstrated experience writing and reviewing business, user, and non-functional/system level requirements
• Comfortable dealing with stakeholders, developers, and architects during facilitated sessions and during the development lifecycle
• Strong knowledge of system architecture and network applications
• 5 to 7 years’ experience of advanced knowledge in security, application security, or network security.
• Ability to positively engaged with the business at all levels
• Ability to troubleshoot complex problems, manage and resolve in a timely manner.
• Ability to manage conflicting priorities effectively.
• Strong communication and conceptual skills with desire to share knowledge and cross-train.
• Proven ability to meet tight deadlines.

OTHER SKILLS and/or ABILITIES

• Familiarity with version control software
• Familiarity with pull request style software development
• Experience with Infrastructure as Code such as Terraform
• Experience with documentation and project management systems such as Confluence and Jira
• Experience writing software in languages such as Python, Ruby, or Golang.

COMMUNICATION SKILLS

Ability to comprehend, analyze, and interpret the most complex business documents. This role involves daily interaction with application and peer teams across global regions, cultures, and time zones. Experience communicating to a global audience and a variety of specific cultural audiences is strongly preferred. Ability to respond effectively to the most sensitive issues. Ability to write reports, manuals, speeches, and articles using distinctive style. Ability to make effective and persuasive presentations on complex topics to employees, clients, top management and/or public groups. Ability to motivate and negotiate effectively with key employees, top management, and client groups to take desired action.

REASONING ABILITY

Ability to solve advanced problems and deal with a variety of options in complex situations. Requires expert level analytical and quantitative skills with proven experience in developing strategic solutions for a growing matrix-based multi-industry sales environment. Draws upon the analysis of others and makes recommendations that have a direct impact on the company.