Job Description:
Job Title Web Application Firewall Engineer/Lead
Corporate Title Assistance Vice President
Location Cary, NC
Who we are
In short - an essential part of Deutsche Bank's technology solution, developing applications for key business areas.
Our Technologists drive Cloud, Cyber and business technology strategy while transforming it within a robust, hands-on engineering culture. Learning is a key element of our people strategy, and we have a variety of options for you to develop professionally. Our approach to the future of work champions flexibility and is rooted in the understanding that there have been dramatic shifts in the ways we work.
Want more jobs like this?
Get Software Engineering jobs in Cary, NC delivered to your inbox every week.
Having first established a presence in the Americas in the 19th century, Deutsche Bank opened its US technology center in Cary, North Carolina in 2009. Learn more about us here.
Overview
Part of the global Technology, Data, & Innovation (TDI) Chief Security Office team based in Cary, US, this position will be responsible for the management and engineering of a network security solution delivered by the TDI Chief Security Office (CSO) Chief Technology Office. This role will provide overall technical guidance overseeing/supporting: requirements, architecture, design, use cases, review test reports, project management/governance and implementation plans.
We are seeking a highly motivated and experienced Web Application Firewall (WAF) Engineer to join our established security team. In this role, you will be responsible for all aspects of our WAF deployment, including design, implementation, configuration, optimization, and ongoing maintenance. You will work closely with other security and engineering teams to ensure the protection of our web applications from evolving cyber threats and will be leaned on to liaise with other engineering teams to integrate the WAF solution seamlessly on premise and in the cloud.
What We Offer You
- A diverse and inclusive environment that embraces change, innovation, and collaboration
- A hybrid working model with up to 60% work from home, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days: A commitment to Corporate Social Responsibility
- Employee Resource Groups support an inclusive workplace for everyone and promote community engagement: Access to a strong network of Communities of Practice connecting you to colleagues with shared interests and values
- Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
- Educational resources, matching gift, and volunteer programs
What You'll Do
- Design, deploy, configure, and maintain WAF solutions to protect our web applications from various attacks, including OWASP Top 10 and Zero-Day vulnerabilities, while collaborating with application development teams to transition their apps behind the WAF; then providing ongoing support as application design changes necessitate
- Stay up to date on the latest WAF technologies, threats, and best practices, as well as participate in security assessments and penetration testing activities
- Document WAF configurations, policies, and procedures, assist with onboarding and training junior security engineers, create and maintain technical documentation, and utilize agile methodologies
- Understand of technology risk concepts, including controls and control frameworks, technology risk domains, risk measurements and methodologies in line with TDI technology risk management but specific to the Business of operation Deutsche Bank's global network in global consistent way
- Analyze and manage the impact and dependencies of new controls to other functions. Make the necessary support transparent to senior management for their prioritization and support, while ensuring adherence to the software development life cycle (SDLC) process and other company demanded engineering and release management practices
- Provide technology expertise and thought leadership with an emphasis on network security and cloud technologies
Skills You'll Need
- Strong knowledge/experience in the following key areas: Google Cloud Platform, Web Application Firewall (WAF), Cloud Based Email Security Platforms, and Cloud Migration Strategies, in addition to current security threats and corresponding technologies
- Experience in working with various level of stakeholders and multi-cultural/global teams, successfully working with global teams across multiple time zones, moderate experience in information security in Web Application Security, and network security concepts (firewalls, intrusion detection/prevention systems)
- Experience with scripting languages (Python, Bash) as well as with SIEM and security information and event management (SIEM) tools would be a plus
- Bachelor's degree in computer science, Information Security, or a related field (or equivalent experience) (Security certifications (e.g., CISSP, CCSP) a plus)
- In-depth knowledge of WAF technologies and solutions (e.g., F5 BIG-IP WAF, Imperva SecureSphere, Cloudflare WAF) with a strong understanding of web application security concepts (OWASP Top 10, SQL Injection, XSS, etc.), high level understanding of HTML concepts with very good understanding of JIRA/Confluence
Skills That Will Help You Excel
- Excellent communication skills, both written and spoken with excellent team building skills and the passion to deliver the very best service to the Business
- Highly proactive self-starting ethos, with strong customer focus, a strong work ethic, high professionalism and exceptional problem-solving skills, and high standard of personal presentation with the ability to imbue confidence in colleagues and clients
- The ability to effectively manage quality and to ensure a consistently high degree of successful delivery within resource, time, and cost constraints, to work under pressure and to tight deadlines whilst maintaining attention to detail, and to work independently and as part of a team
- Exemplary co-ordination skills and the ability to understand business drivers / IT requirements with proven ability to initiate, develop and maintain relationships with technical and non-technical teams and professionals
- Strong problem-solving and analytical skills
Expectations
It is the Bank's expectation that employees hired into this role will work in the Cary office in accordance with the Bank's hybrid working model.
Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.
The salary range for this position in Cary is $100,000 to $142,250.Actual salaries may be based on a number of factors including, but not limited to, a candidate's skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration.
Deutsche Bank Values & Diversity
We believe talent is found in all cultures, countries, races, ethnicities, genders, sexual orientations, disabilities, beliefs, generations, backgrounds, and experiences. We pursue a working environment where everyone can be authentic and feel a sense of belonging. Click here to find out more about our diversity and inclusion efforts.
We are an Equal Opportunity Employer - Veterans/Disabled and other protected categories.
Click these links to view the following notices: EEO is the Law poster and supplement; Employee Rights and Responsibilities under the Family and Medical Leave Act; Employee Polygraph Protection Act and Pay Transparency Nondiscrimination Provision
Learn more about your life at Deutsche Bank through the eyes of our current employees: https://careers.db.com/life
The California Consumer Privacy Act outlines how companies can use personal information. If you are interested in receiving a copy of Deutsche Bank's California Privacy Notice, please email HR.Direct@DB.com.
Deutsche Bank Benefits
At Deutsche Bank, we recognize that our benefit programs have a profound impact on our colleagues. That's why we are focused on providing benefits and perks that enable our colleagues to live authentically and be their whole selves, at every stage of life. We provide access to physical, emotional, and financial wellness benefits that allow our colleagues to stay financially secure and strike balance between work and home. Click hereto learn more!
#LI-HYBRID
Our values define the working environment we strive to create - diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.
We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs and generations and are committed to providing a working environment free from harassment, discrimination and retaliation.
VisitInside Deutsche Bankto discover more about the culture of Deutsche Bank including Diversity, Equity & Inclusion, Leadership, Learning, Future of Work and more besides.
We are an Equal Opportunity Employer - Veterans/Disabled and other protected categories. Click these links to view the following notices: EEO is the Law poster and supplement; Employee Rights and Responsibilities under the Family and Medical Leave Act; Employee Polygraph Protection Act and Pay Transparency Nondiscrimination Provision.