Senior Application Security Engineer

About the role

The Role

As a Senior Application Security Engineer, you will provide hands-on technical delivery for the migration of Web Application Firewall (WAF) capabilities to Cloudflare and/or Akamai. You will work closely with architecture, security, network, and application teams to execute migration waves, onboard applications, implement security policies, and support successful cutovers.

You will play a key role in validating functionality, security, and performance, resolving technical issues, and supporting post-migration stabilization across complex enterprise environments.

What You’ll Do

- Deliver end-to-end WAF migrations to Cloudflare and/or Akamai, including configuration, application onboarding, and deployment.

- Implement and tune WAF security policies, rules, and controls in line with application and security requirements.

- Execute DNS and traffic-routing changes and support integrations required for successful application migration.

- Perform testing, troubleshooting, and validation to confirm functionality, security, and performance throughout migration waves.

- Partner with architecture, security, network, and application teams to support cutover activities, resolve technical issues, and stabilize services following migration.

What We’re Looking For

- 10+ years of relevant experience in network security, application security, infrastructure engineering, or related technical roles, with substantial hands-on WAF experience.

- Strong hands-on experience configuring, migrating, and supporting enterprise WAF technologies, ideally Cloudflare and/or Akamai.

- Practical knowledge of DNS, HTTP/HTTPS, TLS, traffic routing, application delivery, and web security concepts.

- Experience implementing and tuning WAF policies and security rules, troubleshooting application traffic, and resolving migration or production issues.

- Demonstrated experience working collaboratively with architecture, security, network, and application teams to deliver complex technical changes.

Bonus Points For

- Experience delivering large-scale WAF migration or modernization programs across complex enterprise environments.

- Knowledge of Cloudflare and Akamai security, application delivery, and traffic management capabilities.

- Experience supporting phased application migration waves, production cutovers, and post-deployment stabilization.

- Familiarity with automation, scripting, APIs, or infrastructure-as-code approaches used to support security or infrastructure deployments.

- Experience delivering security technology within financial services or another highly regulated environment.

Why Join Capco

- Deliver high-impact technology solutions for Tier 1 financial institutions

- Work in a collaborative, flat, and entrepreneurial consulting culture