Security Research Analyst, WAF Managed Rules

You will turn public CVEs, threat intelligence, customer reports, and internal telemetry into tested, effective mitigations.

Your work will span the detection lifecycle: understanding an exploit, designing a rule, validating it against malicious and legitimate requests…

You will collaborate with engineering and research partners to close coverage gaps and continuously improve the quality of our WAF protections.

Research vulnerabilities and exploitation. Analyze public CVEs, proof-of-concept exploits, and observed attacks to understand root causes, exploit chains, and opportunities for WAF mitigation.

You have hands-on experience in web application security, vulnerability research, or detection engineering, including writing and improving WAF rules, exploit signatures…

You understand HTTP/HTTPS, how web applications and proxies process requests, and common vulnerability classes such as SQL injection, cross-site scripting, remote code execution…

You can analyze a vulnerability advisory or proof of concept, reproduce the exploit in a controlled environment…

You use SQL to investigate large datasets and a language such as Python, Go, or Rust to build research tools, automate analysis…