Web Service Protection Engineer

The role

The Web Service Protection Engineer will develop protection metrics, perform log analysis, and operate cloud-based edge security controls. This role supports the National Center for Biotechnology Information (NCBI) across mixed cloud and on-premises infrastructure.

What you will do

• Develop and own protection metrics and alerting
• Perform deep log analysis to identify overuse, scraping, abuse, DDoS, and attack patterns
• Operate and tune cloud-based edge security controls
• Enforce traffic controls
• Monitor continuously and respond quickly to triage incidents
• Support protection across a mixed cloud and on-premises infrastructure

Required qualifications

• Strong understanding of high-volume web service architecture
• Hands-on experience with a major cloud provider's security and networking stack including global load balancing, traffic management, edge-layer security policy enforcement, WAF capabilities, and large
• Solid grasp of HTTP/HTTPS protocol internals
• Experience analyzing traffic using network and application-layer signals
• Familiarity with common web server platforms, their log formats, and configuration
• Ability to read, write, and tune access control and rate-limiting rules under pressure
• Comfort working across hybrid infrastructure environments

Nice to have

• Experience with advanced abuse mitigation techniques
• Scripting or automation experience (Python, Bash, or similar)
• Prior work protecting high-traffic government or research platforms
• Knowledge of bot detection techniques
• Familiarity with evolving attacker tradecraft

Benefits

• medical, dental and vision coverage
• 401k plan with employer contribution
• paid holidays
• vacation
• tuition reimbursement

About the company

Black Canyon Consulting (BCC) is a professional service and technology focused organization.