Dev Sec Ops Engineer Senior- WAAF Specialist

We're hiring a Senior AWS Cloud Security / DevSecOps Engineer to lead AWS WAF/API security and expand layer‑7 inspection across a large, high‑traffic environment. You'll contribute to policy strategy, own tuning, develop availability‑safe mitigations (including virtual patching), and build incident plans that isolate cause and minimize growth. You'll bring AWS networking experience and zero trust fundamentals. Additionally, you'll have automation skills, including proficiency in Python and Tines. You'll partner with SRE/TOC/SecOps to ensure logging and telemetry are available during incidents. Furthermore, you'll improve reliability over time. We also value innovators and tinkerers who run safe experiments and adopt new technology thoughtfully, without compromising customer trust. We also value AI literacy and an AI security mindset: understanding agentic/GenAI architectures, inherent risks, and network‑layer mitigations that allow safe adoption in regulated environments. You will report to the Senior Manager Network Security.

What you'll own / deliver

• AWS L7 inspection & network protection, including WAF, firewall, IPS, and proxy patterns with safe rollouts
• WAF & API security: tuning, false‑positive reduction, and emergency mitigations/virtual patching
• AI / agentic integration security using least‑privilege gateways, segmentation, logging, and rate controls
• Edge performance: CDN, caching, compression, and edge‑to‑origin troubleshooting
• Incident response engineering in partnership with SRE/TOC/SecOps, improving telemetry and runbooks
• Automation with Python and Tines to enforce guardrails and reduce toil
• Cloud security posture awareness across CSPM and SASE/SSE in AWS environments

Required Experience & Capabilities

• You have deep AWS networking experience at production scale (segmentation, traffic flows, failure modes, safe change).
• Zero Trust network design (least privilege, controlled access, policy‑driven segmentation).
• 3+ years of experience DevSecOps and automation skills (Python, Tines).
• Web application and API security expertise with availability‑safe controls.
• AI security literacy, including GenAI risks and mitigations.
• Excellent documentation, cross‑team influence, and incident response discipline.
• Audit and evidence‑driven control design.

What Success Is

• Secure, reliable L7 inspection and WAF/API protections with minimal customer impact.
• Improved edge performance without weakening security.
• Faster incident response (lower MTTR) through strategies and telemetry.
• AI integrations that follow secure, least‑privilege patterns with auditability.

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why.

Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

• Benefits/Perks:

Our benefits include: Medical, life and dental insurance, Asociacion Solidarista, International Share Save Plan, Flex Work/Work from home, Paid time off, Annual Performance Bonus, Education Reimbursement, Family Bonding, Bereavement Leave, Referral Program, and more.

• This is a fully remote job opportunity. #LI-Remote