DDoS & Web Application Security Engineer - Riyadh,KSA
Core
Designing, deploying, and managing defenses against volumetric, protocol, and application-layer attacks across on-premises and cloud environments.
Role type
DDoS & Web Application Security Engineer
Builds
Layered security controls for APIs, web portals, and subdomains
Domain
Cybersecurity, Cloud Security, Network Security
Required skills
DDoS mitigation, WAF configuration, traffic analysis, bot management, incident response, API security, cloud security, troubleshooting
Preferred skills
SOC operations, threat intelligence coordination
Technologies
F5 Advanced WAF, Cloudflare, Akamai Kona, Radware DefensePro
Responsibilities
Design and implement DDoS protection strategies across hybrid and cloud infrastructures; Monitor real-time DDoS attacks, analyze traffic anomalies, and apply mitigation techniques; Configure, tune, and optimize Web Application Firewall (WAF) policies for APIs, web portals, and subdomains; Implement bot management and behavioral analysis to prevent credential stuffing and scraping attacks; Coordinate with SOC, Threat Intelligence, and Network teams during active incidents; Deliver monthly reports covering DDoS incidents, WAF performance, and bot mitigation metrics
Seniority
Mid-Senior, hands-on IC
