🌿 Back to all jobs
🥝 WAF Adversarial Engineer
Ursus, Inc. | Seattle, Washington, United States | Posted May 16, 2026
Job Description
JOB TITLE: WAF Adversarial Engineer
PAY RANGE: Seattle, WA (preferred), but open to remote.
DURATION: 12 Months
PAY RANGE: $60 - $70/hr. TOP 3 SKILLS:
- Experience bypassing at least two commercial WAF platforms (e.g., Akamai, AWS WAF, Fastly, Cloudflare), including demonstrated exploitation of real-world WAF-protected applications.
- Expertise in HTTP edge-case exploitation, including request smuggling, chunked encoding manipulation, multipart boundary abuse, Unicode normalization issues, and header injection techniques.
- Strong offensive security background with WAF-scoped web application testing (e.g., OSCP/OSWE/BSCP or equivalent proven bypass portfolio), plus ability to translate findings into reproducible tests and defensive rule recommendations.
Company: ...