Application Security Engineer (WAF / Cloud Security)

We are looking for a WAF Cyber Security Engineer to join our Cyber Security team in Kansas City. This is an exciting opportunity to work at the center of enterprise web application protection, helping drive the migration and consolidation of Web Application Firewall (WAF) vendors and platforms across the organization.  In this role, you’ll partner closely with global technology and product teams to secure modern, cloud-based applications while influencing the future direction of our WAF strategy. You will report to the Manager, Cyber Security, and collaborate with teammates across the United States, India, and Barcelona, Spain.    About You – experience, education, skills, and accomplishments  Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related field or equivalent, relevant experience  5+ years of experience in cyber security, with a strong emphasis on WAF, application security, and cloud security  2+ years of experience working with cloud platforms such as AWS, Azure, and/or Google Cloud Platform  2+ years of experience supporting secure SDLC, OWASP Top 10, and application security vulnerability management    It Would Be Great If You Also Have…  Experience automating security controls and processes  Exposure to security testing and monitoring tools such as DAST, SAST, and RBVM  Knowledge of cloud architecture, container security, and DevSecOps practices  Relevant certifications such as CISSP, CCSP, or CySA+  Experience working in globally distributed teams    What Will You Be Doing in This Role?  As a WAF Cyber Security Engineer, you will play a key role in protecting enterprise web applications from evolving cyber threats. Your responsibilities will include:  Designing, deploying, configuring, and maintaining Web Application Firewalls (WAF)  Managing WAF configurations and supporting vendor and platform migrations  Monitoring, analyzing, and responding to WAF and application security alerts and incidents  Conducting security assessments to identify vulnerabilities in products and applications  Collaborating with development and product teams to embed security best practices throughout the product lifecycle  Supporting vulnerability management, penetration testing, and remediation efforts  Developing and maintaining security documentation aligned with industry and regulatory standards  Researching emerging threats and recommending technologies to strengthen the organization’s security posture    About the Team  Our Cyber Security team is a globally distributed group of professionals. The team partners closely with internal stakeholders across engineering, infrastructure, and product organizations to safeguard enterprise applications.  This role is part of a highly visible initiative focused on modernizing and consolidating security platforms, making it both challenging and impactful. You’ll join a collaborative team that values deep technical expertise, continuous improvement, and knowledge sharing. Notably, this role has a strong growth path for career advancement and opportunity.    Hours of Work  This is a full-time, hybrid position working in the office up to 3 days a week during core business hours.  Occasional after-hours or weekend work may be required to support security incidents or special projects. At Clarivate, we are committed to providing equal employment opportunities for all qualified persons with respect to hiring, compensation, promotion, training, and other terms, conditions, and privileges of employment. We comply with applicable laws and regulations governing non-discrimination in all locations.