IND Lead Engineer, Security - Web Application and API Protection Security Engineer

Design, implement, and manage enterprise-scale Web Application and API Protection (WAAP) solutions including threat detection, bot management, and DoS mitigation.

Operate and maintain The Hartford’s enterprise Web Application Firewall (WAF) and API security platforms, including cloud-native deployments across AWS, Azure, and GCP.

Develop and optimize security policies, monitor application-layer threats, conduct incident response, and produce security posture reports and dashboards.

Bachelor's degree in Information Security, Computer Science, Cybersecurity, or related field (or equivalent experience).

Minimum 3 years of experience in application security, web security, network security, or related cybersecurity roles.

Hands-on experience with WAAP technologies such as Akamai WAF & API Security, Apigee API Management, AWS WAF, or Google Cloud Armor.

Strong understanding of OWASP Top 10, OWASP API Security Top 10, and authentication/authorization protocols like OAuth2, OIDC, and SAML.

Experienced in managing and deploying enterprise WAF and API security programs with measurable impact on threat mitigation.

Skilled in integrating WAAP solutions into cloud environments (AWS, Azure, GCP) and collaborating cross-functionally with application development and cybersecurity teams.

Capable of using SIEM, security monitoring tools, and analytics to optimize security policies and support incident response activities.