Application Security Resident Engineer

We are hiring a Resident Application Security Engineer with mandatory banking operations experience to lead our WAF strategy. You will assess environments, execute migrations to FortiWEB, and fine-tune policies using FortiADC and Forti Sandbox. Requires 2-3+ years of experience in Forti Web/FortiADC, strong knowledge of web application security, SSL/TLS, and OWASP Top 10. Fortinet certifications are a plus.

Opening Date: 8/30/2026 | Closing Date: 9/20/2026

Category:
Technical

Location :
Riyadh, KSA

• Involve in the migration of applications and APIs to FortiWEB.
• Involve in the implementation of FortiWEB solution and applications migration.
• Support application security enhancement, WAF optimization, and application onboarding.
• Provide FortiADC expertise for application delivery and load-balancing requirements when required.
• Involve in Forti Sandbox implementation and integration for payload and file inspection.
• Coordinate with application owners, network teams, cybersecurity teams, and infrastructure teams.
• Operate day-to-day tasks for the WAF solution.

• Assess the existing WAF architecture, policies, application coverage, traffic, capacity, and integrations.
• Identify security, performance, scalability, resiliency, and availability gaps.
• Participate in design workshops and prepare HLD, LLD, migration plans, runbooks, and functional test plans.
• Deploy and configure the Forti Web platform.
• Migrate applications and APIs to Forti Web.
• Convert existing WAF policies to Forti Web best-practice equivalent policies.
• Install and bind SSL certificates.
• Configure security profiles for existing and newly onboarded applications.
• Implement payload validation, multi-file inspection, threat detection, and advanced attack protection.
• Integrate Forti Web with Forti Sandbox for payload and file inspection.
• Prepare application cutover and rollback procedures.
• Execute application migrations during approved maintenance windows.
• Coordinate application testing and validation with application owners.
• Tune WAF policies to improve protection, performance, and reduce false positives.
• Validate throughput, bandwidth handling, concurrent connections, and application availability.
• Troubleshoot WAF, SSL, application publishing, security-policy, and performance issues.
• Provide post-migration support and operational monitoring.
• Maintain application migration records, implementation documents, test results, and validation reports.
• Deliver knowledge-transfer sessions to the customer’s technical teams.
• Operate day-to-day tasks for the WAF solution.

• Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related field.
• 2 or 3+ years of experience.
• Strong hands-on experience with Forti Web deployment, migration, administration, and troubleshooting.
• Strong hands-on experience with FortiADC deployment and application load balancing.
• Forti Sandbox experience is a huge advantage.
• Experience migrating applications and security policies from another WAF platform.
• Strong knowledge of web application security, APIs, SSL/TLS, HTTP/HTTPS, and OWASP Top 10.
• Experience with WAF policy tuning, application onboarding, payload validation, and file inspection.
• Strong knowledge of networking and cybersecurity principles.
• Experience preparing HLD, LLD, migration plans, test plans, and implementation documents.
• Relevant Fortinet certifications are preferred.
• Good communication, documentation, and troubleshooting skills.
• Experience in monitoring and operating day-to-day tasks in WAF and Load Balancing solutions