Lead Application Security Engineer

Astrally Technologies is Hiring!

Role : Lead Application Security Engineer

Client : Wells Fargo

Location : Charlotte, NC | Chandler, AZ | Dallas / Irving, TX ( Hybrid – 3 days onsite / 2 remote )

Duration : 12–18 months

Rate : $80 / hr W2

Work Authorization : USC, GC, H4 EAD, L2, or TN Visa ( No OPT or CPT – please do not apply if you do not meet these requirements )

About the Role :

We’re seeking an experienced Lead Application Security Engineer specializing in Web Application Firewalls (WAF) and Layer 7 security . This role is responsible for securing critical web applications and APIs by designing, configuring, and tuning enterprise WAF solutions across multiple vendors.

Key Responsibilities :

Configure, tune, and monitor Web Application Firewalls (Imperva, Cloudflare, Akamai, F5 Advanced, etc.)

Analyze and mitigate Layer 7 DDoS attacks and web vulnerabilities

Implement bot management and API security strategies

Develop and apply rate limiting policies and protection rules for web attacks

Manage DNS , A / CNAME records , Global Load Balancing (GLB) , and Local Load Balancing (LLB)

Collaborate with engineering, operations, and business teams to ensure application resilience and compliance

Stay current on evolving web security threats, WAF technologies, and best practices

Preferred Qualifications :

5+ years of experience in Web Application Firewalls / Layer 7 security

Vendor exposure : Imperva, ASM, Cloudflare, Akamai, F5 Advanced, FortiWeb, Barracuda

Strong knowledge of bot management, API security, rate limiting

Familiarity with load balancing, DNS, and firewall concepts

Certifications such as CISSP , GIAC GWEB , or vendor-specific WAF certs are a plus