WAF Security Engineer
We are seeking a WAF Security Engineer to design, implement, and maintain web application firewall protections across a complex digital environment. The successful candidate will be responsible for configuring and tuning WAF policies, monitoring traffic patterns, investigating security alerts, and protecting internet-facing applications from common and emerging threats. You will work closely with application, infrastructure, network, and security teams to ensure that security controls are effective while supporting reliable application performance and availability.
Key responsibilities include developing and maintaining WAF rules, signatures, access controls, rate-limiting policies, bot-management controls, and virtual patching measures. You will analyse logs and security events, identify false positives and malicious activity, and recommend improvements to detection and prevention capabilities. The role will also involve supporting incident response activities, conducting root-cause analysis, documenting security decisions, and assisting with vulnerability remediation and application onboarding. You will contribute to security reviews, change management, operational reporting, and the continuous improvement of monitoring, alerting, and response procedures.
Applicants should have practical experience administering or engineering WAF technologies, preferably within large-scale, highly available environments. Strong knowledge of HTTP, HTTPS, TLS, DNS, TCP/IP, web application architectures, reverse proxies, and common attack techniques such as injection, cross-site scripting, credential abuse, and denial-of-service attacks is required. Experience with cloud platforms, CDN services, API security, automation, and scripting using tools such as Python, PowerShell, or Bash would be advantageous. Familiarity with OWASP guidance, SIEM platforms, vulnerability management, and security frameworks is desirable. Excellent analytical, communication, and documentation skills are essential, along with the ability to manage priorities, collaborate across technical teams, and participate in an on-call or out-of-hours support rota when required.
WAF Security Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- IT Security Manager
- Security Consultant
- SOC Analyst
- Identity Access Management IAM
- Cyber Security Consultant
- Cloud Security
- Application Security
- Incident Response
- Penetration Tester
LATEST JOBS
- Security Engineer (Contractor)
- Vice President, Field CISO Com...
- Microsoft 365 & Security Infra...
- Senior ICT Security Designer
- Data Protection Expert
- Data Protection Officer: Schoo...
- Data Protection Officer
- IT CONSULTANT (IT Management,...
- Technology and Cyber Employee...
- Cyber Security Consultant
- Cyber Security Consultant (Pen...
- Platform and Services Engineer...