Senior IT Security

This is a fully remote position, open to applicants in Sweden.

📋 Description

• Oversee and address incidents, service requests, and change requests related to Cloudflare WAF via ServiceNow.

• Manage daily operational tickets while adhering to defined SLA targets.

• Conduct root cause analysis for security incidents and issues related to application access.

• Collaborate with Application, Infrastructure, Network, and Security teams to resolve issues.

• Participate in major incident calls and offer technical support during service outages.

• Monitor security events, alerts, and dashboards from Cloudflare.

• Investigate and troubleshoot blocked traffic, false positives, and issues with application functionality.

• Optimize Cloudflare Managed Rules, Custom Rules, Rate Limiting Rules, and Bot Protection policies.

• Analyze WAF logs and security analytics to detect threats and suggest enhancements.

• Assist with the onboarding and offboarding of applications to Cloudflare.

• Implement approved changes using ServiceNow's change management processes.

• Deploy and validate updates to WAF policies, ACL changes, SSL certificate modifications, and DNS updates.

• Conduct pre-production and post-implementation validations.

• Support scheduled maintenance and production cutovers.

• Troubleshoot issues related to application connectivity, DNS resolution, SSL/TLS certificates, and Cloudflare Tunnel.

• Analyze HTTP/S traffic, network traces, and Cloudflare logs for effective problem resolution.

• Create and manage WAF rules, firewall policies, IP lists, rate limits, and bot mitigation controls.

• Assist with DDoS protection configurations and activities related to attack mitigation.

• Establish security baselines and manage approved exception requests.

• Ensure that Cloudflare configurations adhere to organizational security standards.

• Monitor the service health and security posture of protected applications.

• Prepare weekly and monthly operational reports.

• Track the status of onboarding, incidents, change success rates, and metrics for attack mitigation.

• Maintain operational dashboards and KPI reporting.

• Keep operational runbooks, SOPs, and knowledge base articles up to date.

• Update architecture diagrams and support documentation as needed.

• Engage in security reviews, audits, and compliance activities.

• Assist with risk assessments and processes for security exceptions.

⛳️ Requirements

• In-depth knowledge of Cloudflare WAF.

• Practical experience with ServiceNow's Incident, Request, Problem, and Change Management modules.

• Experience supporting Cloudflare WAF in a 24/7 enterprise environment.

• Strong troubleshooting abilities in DNS, SSL/TLS, HTTP/S, Load Balancing, and Application Security.

• Familiarity with Cloudflare WAF, DDoS protection, Bot Management, Zero Trust, and Cloudflare Tunnels.

• Experience with Azure, AWS, on-premises, and enterprise application environments.

• Proficiency in the English language is required.

• Security clearance is not necessary.

🏝️ Benefits

• Extension option: Yes

• 100% scope

• 100% remote work