About this role
Job title: DDoS & Web Application Security Engineer
Location: Riyadh, Riyadh Province, Saudi Arabia Employment Type: Full-time Work Arrangement: On-site Sector: Information Technology & Software Experience Level: Senior (5-8 years) Application Deadline: November 8, 2026
About the Company
DeepSource Technologies is a forward-thinking organization dedicated to providing comprehensive IT and AI services. We specialize in connecting businesses with exceptional multilingual talent, focusing on the dynamic fields of Information Technology and Artificial Intelligence.
Our core mission is to source highly skilled professionals and deliver tailored talent solutions that empower companies to accelerate their growth, foster innovation, and successfully navigate digital transformation. We pride ourselves on being a trusted partner, enabling clients to secure the right talent and leverage AI-driven solutions to maintain a competitive edge in today's rapidly evolving digital landscape.
Job Description We are seeking a skilled DDoS & Web Application Security Engineer to join our team in Riyadh. This role is crucial for designing, deploying, and managing robust defenses against a wide range of cyber threats, including volumetric, protocol, and application-layer attacks, across both on-premises and cloud environments.
Your responsibilities will include architecting and implementing advanced DDoS protection strategies, monitoring real-time attacks, and applying effective mitigation techniques. You will also be responsible for configuring and optimizing Web Application Firewall (WAF) policies for APIs, web portals, and subdomains, as well as implementing bot management solutions to prevent malicious activities like credential stuffing and scraping.
Collaboration is key in this role. You will work closely with our Security Operations Center (SOC), Threat Intelligence, and Network teams during active incidents. Continuous improvement of our layered security controls against evolving attack vectors will be a core part of your duties. Additionally, you will be tasked with delivering monthly reports detailing DDoS incidents, WAF performance, and bot mitigation metrics.
Required Skills
- DDoS Protection
- Web Application Firewall (WAF)
- API Security
- Network Security
- Incident Response
- Traffic Analysis
- Bot Management
- Cloud Security
- F5 Advanced WAF
- Cloudflare
- Akamai Kona
- Radware DefensePro
Key Responsibilities
- Design and implement DDoS protection strategies across hybrid and cloud infrastructures.
- Monitor real-time DDoS attacks, analyze traffic anomalies, and apply mitigation techniques.
- Configure, tune, and optimize Web Application Firewall (WAF) policies for APIs, web portals, and subdomains.
- Implement bot management and behavioral analysis to prevent credential stuffing and scraping attacks.
- Coordinate with SOC, Threat Intelligence, and Network teams during active incidents.
- Continuously improve layered security controls against evolving attack vectors.
- Deliver monthly reports covering DDoS incidents, WAF performance, and bot mitigation metrics.
Qualifications
- 5+ years of experience in network and web application security.
- Hands-on experience with F5 Advanced WAF, Cloudflare, Akamai Kona, or Radware DefensePro.
- Strong understanding of DDoS attack types, traffic analysis, and mitigation techniques.
- Experience securing APIs and cloud-based applications.
- Familiarity with SOC operations and incident response workflows.
- Strong troubleshooting and communication skills.