What you’ll do

- Monitor and Analyze Traffic: Actively monitor real-time web traffic and analyze WAF logs using SIEM tools (like DEVO) to detect and mitigate threats such as SQL injection, XSS, and bot attacks.
- Deploy and Tune Security Policies: Safely deploy and tune WAF rules, transitioning them from Log/Simulate mode to Block mode while investigating false positives to ensure valid business traffic is never disrupted.
- Provide Virtual Patching: Write custom regex signatures (PCRE) to "virtually patch" OWASP Top 10 vulnerabilities, protecting applications before developers can implement permanent code fixes.
- Support Incident Response: Actively participate in security incident response by providing WAF telemetry, and collaborate with web development teams to share actionable feedback on application vulnerabilities.
- Reporting and Documentation: Draft technical documentation and weekly reports detailing attack trends, blocked threats, and system performance metrics for and security metrics.

What experience you need

2-4 years of experience in a corporate role.



Bachelor's Degree highly preferred (Willing to consider experience that aligns closely to all requirements w/out a degree).

OWASP Top 10: Proven experience mitigating SQL Injection (SQLi), Cross-Site Scripting (XSS), Local File Inclusion (LFI), and Cross-Site Request Forgery (CSRF).

Policy Tuning: Ability to transition WAF rules from Log/Simulate mode to Block mode without breaking production traffic.

Regex & Custom Rules: Proficiency in writing custom signatures (PCRE) to virtually patch vulnerabilities before developers can fix the code.

What could set you apart

- Demonstrated expertise in managing the request-response lifecycle, including deep familiarity with status codes, headers, and payloads.

Primary Location:

Function:

Function - Security Governance and Compliance

Equifax is a integral data and analytics company that empowers informed decision-making for businesses and government agencies, supporting economic progress across 24 countries.

#J-18808-Ljbffr

📌 Network Security Engineer (Santiago)
🏢 Equifax
📍 Santiago