WAF Adversarial Engineer

Ursus, Inc. • Seattle, Washington, United States

📍 Location

Seattle, Washington

⏰ Job Type

Full-time

📅 Posted

May 16, 2026

About the Role

                    JOB TITLE: WAF Adversarial Engineer
    
PAY RANGE: Seattle, WA (preferred), but open to remote.
    
DURATION: 12 Months
    
PAY RANGE: $60 - $70/hr.
    
    TOP 3 SKILLS:

    Experience bypassing at least two commercial WAF platforms (e.g., Akamai, AWS WAF, Fastly, Cloudflare), including demonstrated exploitation of real-world WAF-protected applications.

    Expertise in HTTP edge-case exploitation, including request smuggling, chunked encoding manipulation, multipart boundary abuse, Unicode normalization issues, and header injection techniques.

    Strong offensive security background with WAF-scoped web application testing (e.g., OSCP/OSWE/BSCP or equivalent proven bypass portfolio), plus ability to translate findings into reproducible tests and defensive rule recommendations.

    Company:
 ...

Ready to Join Through a Referral?

Apply now and get connected directly with the hiring team

Apply for this Position