Description
Job Summary:
This role involves actively monitoring web traffic, deploying and tuning WAF rules, providing virtual patching for vulnerabilities, and supporting security incident response.
Key Responsibilities:
1. Monitor and analyze web traffic to detect and mitigate threats.
2. Deploy and tune WAF rules, investigating false positives.
3. Apply virtual patching for vulnerabilities using custom regex signatures.
* Providencia
* Chile
* Security, Technology Governance \& Compliance
* Full time
* 8/14/2026
* J00178391
To play this video, please accept Functional \& Personalisation cookies in your cookie preferences.
Manage Preferences
Equifax is where you can unlock your potential. If you want to reach your true potential, forge new paths, develop new skills, collaborate with brilliant minds, and make a meaningful impact, we want to hear from you.
**What you’ll do**
* **Monitor and Analyze Traffic:** Actively monitor real\-time web traffic and analyze WAF logs using SIEM tools (like DEVO) to detect and mitigate threats such as SQL injection, XSS, and bot attacks.
* **Deploy and Tune Security Policies:** Safely deploy and tune WAF rules, transitioning them from Log/Simulate mode to Block mode while investigating false positives to ensure valid business traffic is never disrupted.
* **Provide Virtual Patching:** Write custom regex signatures (PCRE) to "virtually patch" OWASP Top 10 vulnerabilities, protecting applications before developers can implement permanent code fixes.
* **Support Incident Response:** Actively participate in security incident response by providing WAF telemetry, and collaborate with web development teams to share actionable feedback on application vulnerabilities.
* **Reporting and Documentation:** Draft technical documentation and weekly reports detailing attack trends, blocked threats, and system performance metrics for and security metrics.
**What experience you need**
* 2\-4 years of experience in a corporate role. Bachelor's Degree highly preferred (Willing to consider experience that aligns closely to all requirements w/out a degree).
* Deep HTTP Knowledge: Must understand headers, cookies, sessions, and the full request/response lifecycle.
* OWASP Top 10: Proven experience mitigating SQL Injection (SQLi), Cross\-Site Scripting (XSS), Local File Inclusion (LFI), and Cross\-Site Request Forgery (CSRF).
* Policy Tuning: Ability to transition WAF rules from Log/Simulate mode to Block mode without breaking production traffic.
* Regex \& Custom Rules: Proficiency in writing custom signatures (PCRE) to virtually patch vulnerabilities before developers can fix the code.
**What could set you apart**
* Demonstrated expertise in managing the request\-response lifecycle, including deep familiarity with status codes, headers, and payloads.
We offer a hybrid work model, flexible hours, additional days off, comprehensive compensation packages and supplemental medical insurance, gym membership agreements, parental benefits, access to our online learning platform, recognition programs, professional career development, and a diverse and multicultural environment — among other benefits!
Equifax was ranked in the top 5 companies for career development by LinkedIn.
Are you ready to unlock your potential? Apply today and start a journey toward a new and exciting career at Equifax, where you can make a difference!
**Who is Equifax?**
At Equifax, we believe knowledge drives progress. As a global data, analytics and technology company, we play an essential role in the global economy by helping employers, employees, financial institutions and government agencies make critical decisions with greater confidence.
We work to help create seamless and positive experiences during life’s pivotal moments: applying for jobs or a mortgage, financing an education or buying a car. Our impact is real and to accomplish our goals we focus on nurturing our people for career advancement and their learning and development, supporting our next generation of leaders, maintaining an inclusive and diverse work environment, and regularly engaging and recognizing our employees. Regardless of location or role, the individual and collective work of our employees makes a difference and we are looking for talented team players to join us as we help people live their financial best.
Equifax is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.