Associate Security Engineer - WAF & Runtime Protections

Roseland, NJ

Full-time

Onsite

$43K/yr - $116K/yr

Entry Level

ADP is a comprehensive global provider of cloud-based human capital management solutions, and they are seeking an Associate Security Engineer to join their Global Security Organization. In this role, you will assess the runtime security policies of ADP applications, review web traffic, and create policy recommendations to enhance security.

Apply Now

Responsibilities

This is a full-time cybersecurity position for a senior technical security analyst
Review web application firewall (WAF) policy-level traffic on a weekly (or daily) basis in a timely manner and identify actions to tighten security by moving rules from alarm to deny
Regularly mature policy settings for discrete applications within the WAF as an outcome of your reviews by presenting recommendations and meeting with the app teams to earn confidence and explain next steps
Be accountable for your individual operational progress and don’t be afraid to ask for help
Contribute towards team or program improvements by identifying areas to improve and working with leadership to make
Maintain consistent documentation associated to all operational activities and all developed systems or integrations
Be able to take high level directive and self-manage assignments in runtime operations to completion with appropriate touchpoints

Qualification

Required

Bachelor’s degree or equivalent knowledge demonstration in a relevant field such as computer science, computer engineering, or information technology
1-2 years of experience in security OR demonstrated success in similar security work
Demonstrated expertise in analyzing web traffic for known common attack patterns like SQLi, XSS, and more OR good understanding of application security and CWE/CVE with demonstrated potential to rapidly skill up
Ability to self-identify patterns in metadata (security or otherwise) across individual or multiple records and strategize ways to quickly filter data as needed
An interest to learn and grow in application security and its runtime protections (WAF, GenAI Guardrails, API Security, etc.)

Preferred

Expertise in reading and writing one core coding or scripting language (Java, Python, etc.)
Experience in querying (SQL) and data manipulation (RegEx, etc) across various toolsets
Experience with engaging with other teams from a governance position
Experience in detailed & organized documentation
Inclination to proactively learn and grow within a cybersecurity organization
Have an opinion – the ability to think and judge for yourself is crucial towards helping our application teams reduce their workload in identifying false positives