Application security resident engineer

We are hiring a Resident Application Security Engineer with mandatory banking operations experience to lead our WAF strategy. You will assess environments, execute migrations to Forti WEB, and fine-tune policies using Forti ADC and Forti Sandbox. Requires 2-3+ years of experience in Forti Web/Forti ADC, strong knowledge of web application security, SSL/TLS, and OWASP Top 10. Fortinet certifications are a plus. Opening Date: 8/30/2026 | Closing Date: 9/20/2026 Category: Technical Location : Riyadh, KSA Job Purpose Involve in the migration of applications and APIs to Forti WEB. Involve in the implementation of Forti WEB solution and applications migration. Support application security enhancement, WAF optimization, and application onboarding. Provide Forti ADC expertise for application delivery and load-balancing requirements when required. Involve in Forti Sandbox implementation and integration for payload and file inspection. Coordinate with application owners, network teams, cybersecurity teams, and infrastructure teams. Operate day-to-day tasks for the WAF solution. Job Description Assess the existing WAF architecture, policies, application coverage, traffic, capacity, and integrations. Identify security, performance, scalability, resiliency, and availability gaps. Participate in design workshops and prepare HLD, LLD, migration plans, runbooks, and functional test plans. Deploy and configure the Forti Web platform. Migrate applications and APIs to Forti Web. Convert existing WAF policies to Forti Web best-practice equivalent policies. Install and bind SSL certificates. Configure security profiles for existing and newly onboarded applications. Implement payload validation, multi-file inspection, threat detection, and advanced attack protection. Integrate Forti Web with Forti Sandbox for payload and file inspection. Prepare application cutover and rollback procedures. Execute application migrations during approved maintenance windows. Coordinate application testing and validation with application owners. Tune WAF policies to improve protection, performance, and reduce false positives. Validate throughput, bandwidth handling, concurrent connections, and application availability. Troubleshoot WAF, SSL, application publishing, security-policy, and performance issues. Provide post-migration support and operational monitoring. Maintain application migration records, implementation documents, test results, and validation reports. Deliver knowledge-transfer sessions to the customer’s technical teams. Operate day-to-day tasks for the WAF solution. Job Qualifications Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related field. 2 or 3+ years of experience. Strong hands-on experience with Forti Web deployment, migration, administration, and troubleshooting. Strong hands-on experience with Forti ADC deployment and application load balancing. Forti Sandbox experience is a huge advantage. Experience migrating applications and security policies from another WAF platform. Strong knowledge of web application security, APIs, SSL/TLS, HTTP/HTTPS, and OWASP Top 10. Experience with WAF policy tuning, application onboarding, payload validation, and file inspection. Strong knowledge of networking and cybersecurity principles. Experience preparing HLD, LLD, migration plans, test plans, and implementation documents. Relevant Fortinet certifications are preferred. Good communication, documentation, and troubleshooting skills. Experience in monitoring and operating day-to-day tasks in WAF and Load Balancing solutions #J-18808-Ljbffr