Equifax es donde puedes impulsar tus posibilidades. Si deseas alcanzar tu verdadero potencial, trazar nuevos caminos, desarrollar nuevas habilidades, colaborar con mentes brillantes y tener un impacto significativo, queremos saber de ti.
What you’ll do
- Monitor and Analyze Traffic: Actively monitor real-time web traffic and analyze WAF logs using SIEM tools (like DEVO) to detect and mitigate threats such as SQL injection, XSS, and bot attacks.
- Deploy and Tune Security Policies: Safely deploy and tune WAF rules, transitioning them from Log/Simulate mode to Block mode while investigating false positives to ensure valid business traffic is never disrupted.
- Provide Virtual Patching: Write custom regex signatures (PCRE) to "virtually patch" OWASP Top 10 vulnerabilities, protecting applications before developers can implement permanent code fixes.
- Support Incident Response: Actively participate in security incident response by providing WAF telemetry, and collaborate with web development teams to share actionable feedback on application vulnerabilities.
- Reporting and Documentation: Draft technical documentation and weekly reports detailing attack trends, blocked threats, and system performance metrics for and security metrics.
What experience you need
-
2-4 years of experience in a corporate role. Bachelor's Degree highly preferred (Willing to consider experience that aligns closely to all requirements w/out a degree).
-
Deep HTTP Knowledge: Must understand headers, cookies, sessions, and the full request/response lifecycle.
-
OWASP Top 10: Proven experience mitigating SQL Injection (SQLi), Cross-Site Scripting (XSS), Local File Inclusion (LFI), and Cross-Site Request Forgery (CSRF).
-
Policy Tuning: Ability to transition WAF rules from Log/Simulate mode to Block mode without breaking production traffic.
-
Regex & Custom Rules: Proficiency in writing custom signatures (PCRE) to virtually patch vulnerabilities before developers can fix the code.
What could set you apart
-
Demonstrated expertise in managing the request-response lifecycle, including deep familiarity with status codes, headers, and payloads.
Ofrecemos modalidad de trabajo híbrido, horarios flexibles, días libres adicionales, paquetes integrales de compensación y seguro médico complementario, convenio con gimnasio, beneficios para madres y padres, acceso a nuestra plataforma de aprendizaje en línea, programas de reconocimiento, desarrollo de carrera profesional y un entorno diverso y multicultural, ¡entre otros!
Equifax fue ranqueado en el top 5 de empresas con mejor desarrollo de carrera por LinkedIn.
¿Estás listo para impulsar tus posibilidades? ¡Aplica hoy y comienza un camino hacia una nueva y emocionante carrera en Equifax, donde puedes marcar la diferencia!
Who is Equifax?
At Equifax, we believe knowledge drives progress. As a global data, analytics and technology company, we play an essential role in the global economy by helping employers, employees, financial institutions and government agencies make critical decisions with greater confidence.
We work to help create seamless and positive experiences during life’s pivotal moments: applying for jobs or a mortgage, financing an education or buying a car. Our impact is real and to accomplish our goals we focus on nurturing our people for career advancement and their learning and development, supporting our next generation of leaders, maintaining an inclusive and diverse work environment, and regularly engaging and recognizing our employees. Regardless of location or role, the individual and collective work of our employees makes a difference and we are looking for talented team players to join us as we help people live their financial best.
Equifax is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.
