Offensive Security and WAF Specialist

Make a difference here.
UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. Founded and operated by security practitioners with decades of experience, the UltraViolet Cyber security-as-code platform combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations by eliminating risks of separate red and blue teams.
By creating continuously optimized identification, detection, and resilience from today’s dynamic threat landscape, UltraViolet Cyber provides both managed and custom-tailored unified security operations solutions to the Fortune 500, Federal Government, and Commercial clients. UltraViolet Cyber is headquartered in McLean, Virginia, with global offices across the U.S. and in India. 
UltraViolet Cyber is seeking an Offensive Security and WAF Specialist who will be responsible for simulating advanced cyber-attacks, developing robust WAF rules, and ensuring our web applications are resistant to the latest threats. This role requires a balance of proactive offensive security tactics and a deep understanding of web application firewalls.
This position is entirely remote.
No third-party candidates will be considered.

Responsibilities:

• Advanced Threat Simulation: Regularly simulate sophisticated cyber-attacks on our web applications, ensuring our defenses are always tested and optimized.
• WAF Rule Writing: Create, test, and deploy custom WAF rules to defend against emerging threats and vulnerabilities proactively.
• Web Application Firewall Management: Ensure the optimal deployment, configuration, and maintenance of our WAF systems.
• CDN & WAF Synchronization: Work closely with infrastructure teams to integrate WAF solutions with CDN platforms like Fastly, Akamai, and Cloudflare.
• Red Team Engagements: Collaborate with internal or external red teams to continuously challenge and validate our web application security posture.
• Vulnerability Assessment and Feedback Loop: Coordinate with vulnerability assessment teams, utilizing feedback to enhance WAF rules and offensive strategies.
• Documentation and Reporting: Maintain up-to-date documentation of WAF configurations, rules, and attack simulations. Regularly report on security metrics and improvement areas.
• Training and Collaboration: Foster a culture of security awareness by offering training sessions and collaborating with development and operations teams to ensure best practices are followed.

Required Skills and Qualifications:

• Comprehensive understanding of offensive security tactics, techniques, and procedures.
• Demonstrated ability to design and execute sophisticated cyber-attack scenarios.
• Strong web application security expertise encompassing the OWASP Top 10 and beyond.
• Proven experience in deploying, managing, and fine-tuning WAFs.
• Knowledge of CDN architectures and their integration with WAF solutions.
• Ability to document processes, configurations, and attack scenarios clearly and comprehensively.
• Strong analytical, decision-making, and problem-solving skills.
• Excellent communication skills, both written and verbal.
• Relevant certifications such as OSCP, GWAPT, or other related qualifications would be advantageous.

Preferred Experience:

• Prior experience in a dedicated offensive security role.
• Experience with agile development environments and DevSecOps practices.
• Familiarity with cloud platforms like AWS, Azure, or GCP.

We sincerely thank all applicants in advance for submitting their interest in this position. We know your time is valuable.
UltraViolet Cyber welcomes and encourages diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability, or veteran status. 
If you want to make an impact, UltraViolet Cyber is the place for you!