Information Security Engineer

## Information Security Engineer Apply:
Hybrid:
Andover, MA Federal Street:
Full time:
Posted Today:

**** We’re Watts. Together, we’re reimagining the future of water.
**** We feel proud every day about what we do. We're all part of the same crucial mission, no matter what function we support -- it's to provide safe, clean water for the world, and to protect our planet's most valuable resource.
*
* What we do:

** For 150 years, Watts has built best-in-class products that are trusted by customers in residential and commercial settings across the world. We are at the forefront of innovation, working with cutting-edge technology to provide smart and connected, sustainable water solutions for the future. Watts is a leading brand with a quality reputation — and we have a dynamic future ahead.
** Scope of Position
** Watts Water Technologies is seeking a mid-level Information Security Engineer to own our edge and web application security program. This role is focused on Cloudflare, application security, and reducing our internet-facing attack surface. You will own these platforms end to end and work alongside the Enterprise Security Engineering and Incident Response teams.
** Primary

Job Duties and Responsibilities
*** Manage Cloudflare end to end. Manage WAF policy and rule tuning, DNS configuration, bot management, rate limiting, and edge security controls across our public-facing properties.
* Run our web application security program. Manage scanning coverage and scheduling, validate and triage findings, and drive remediation with application owners through to closure.
* Manage our external attack surface. Track internet-facing assets, identify unintended exposure, and coordinate remediation with the teams that own them.
* Translate security findings into practical guidance for application, infrastructure, and network teams, and work with them through to resolution.
* Partner with the broader Information Security team on investigations, security projects, and acquisition integration work as priorities require.
** Required Qualifications
*** Bachelor's degree or equivalent practical experience, and at least 5 years of hands-on information security experience.
* Demonstrated experience independently administering a WAF or edge security platform, including rule creation and tuning. Cloudflare experience is strongly preferred.
* Hands-on experience running or significantly contributing to a web application security or vulnerability management program, including triaging findings and driving remediation with application owners.
* General understanding of core security disciplines outside your primary focus, such as network security principles, DNS security, SIEM and log management, endpoint security, or cloud security in AWS and Azure. Depth in all of these is not expected.
* Relevant certifications such as Security+, GWAPT, GWEB, or an AWS or Azure associate level security certification are preferred.
** General Applicable Company Competencies
*** Commitment to Watts’ values of integrity, accountability, continuous improvement and innovation, and transparency.
* Punctuality and dependability.
* Ability to be flexible and adapt to changing work priorities and stressful conditions.
* Adherence to all personnel policies, procedures, and standards of process as implemented by Watts.
* Maintain productive and collaborative relationships with other Watts employees.
* Adherence to Watts’ seven cultural beliefs:
Growth Mindset, Customer-Focused Innovation, Constant Communication, Clear Goals, Collaborate Globally, Be Inclusive, and Take Action.
** Working Conditions
** While performing the job duties, you will be working in an office environment. You will be required to work in the office at the Andover, MA location three days…