15 ago
|
Equifax
|
Santiago
Equifax es donde puedes impulsar tus posibilidades. Si deseas alcanzar tu verdadero potencial, trazar nuevos caminos, desarrollar nuevas habilidades, colaborar con mentes brillantes y tener un impacto significativo, queremos saber de ti.
What you’ll do
Monitor and Analyze Traffic: Actively monitor real-time web traffic and analyze WAF logs using SIEM tools (like DEVO) to detect and mitigate threats such as SQL injection, XSS, and bot attacks.
Deploy and Tune Security Policies: Safely deploy and tune WAF rules, transitioning them from Log/Simulate mode to Block mode while investigating false positives to ensure valid business traffic is never disrupted.
Provide Virtual Patching: Write custom regex signatures (PCRE) to "virtually patch" OWASP Top 10 vulnerabilities, protecting applications before developers can implement permanent code fixes.
Support Incident Response: Actively participate in security incident response by providing WAF telemetry, and collaborate with web development teams to share actionable feedback on application vulnerabilities.
Reporting and Documentation:
Draft technical documentation and weekly reports detailing attack trends, blocked threats, and system performance metrics for and security metrics.
What experience you need
2-4 years of experience in a corporate role. Bachelor's Degree highly preferred (Willing to consider experience that aligns closely to all requirements w/out a degree).
Deep HTTP Knowledge: Must understand headers, cookies, sessions, and the full request/response lifecycle.
OWASP Top 10: Proven experience mitigating SQL Injection (SQLi), Cross-Site Scripting (XSS), Local File Inclusion (LFI), and Cross-Site Request Forgery (CSRF).
Policy Tuning: Ability to transition WAF rules from Log/Simulate mode to Block mode without breaking production traffic.
Regex & Custom Rules: Proficiency in writing custom signatures (PCRE) to virtually patch vulnerabilities before developers can fix the code.
What could set you apart
Demonstrate
📌 Network Security Engineer (Santiago)
🏢 Equifax
📍 Santiago