WAF Security Engineer
We are seeking a WAF Security Engineer to design, implement, and maintain web application firewall protections across a complex digital environment. You will help safeguard customer-facing applications, APIs, and online services from threats including automated attacks, injection attempts, bot activity, data leakage, and application-layer denial-of-service attacks. The role will involve working closely with application, infrastructure, cloud, DevOps, and security teams to ensure that protective controls are effective, resilient, and aligned with business requirements.
Key responsibilities include developing and tuning WAF policies, rules, signatures, exclusions, and rate-limiting controls; analysing security events, traffic patterns, and false positives; and responding to alerts and incidents involving web-based threats. You will conduct regular reviews of WAF performance and coverage, recommend improvements, and support the secure onboarding of new applications and APIs. The role also includes investigating complex attacks, contributing to incident response and root-cause analysis, maintaining accurate documentation, and producing operational and security reports. You may also support vulnerability management, penetration testing activities, threat modelling, and the integration of WAF technologies with SIEM, SOAR, monitoring, and ticketing platforms.
Applicants should have practical experience administering and troubleshooting enterprise WAF platforms, with a strong understanding of HTTP, HTTPS, TCP/IP, DNS, TLS, reverse proxies, load balancers, and web application architectures. Knowledge of OWASP Top 10 risks, API security, bot management, DDoS mitigation, common attack techniques, and secure development practices is essential. Experience with cloud environments, automation, scripting, infrastructure as code, and security monitoring tools would be highly advantageous. Strong analytical and communication skills are required, together with the ability to explain technical risks clearly, manage competing priorities, and collaborate effectively with technical and non-technical stakeholders. Relevant security certifications or demonstrable equivalent experience are welcomed.
WAF Security Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- IT Security Manager
- Security Consultant
- SOC Analyst
- Identity Access Management IAM
- Cyber Security Consultant
- Cloud Security
- Application Security
- Incident Response
- Penetration Tester
LATEST JOBS
- Security Engineer (Contractor)
- Vice President, Field CISO Com...
- Microsoft 365 & Security Infra...
- Senior ICT Security Designer
- Data Protection Expert
- Data Protection Officer: Schoo...
- Data Protection Officer
- IT CONSULTANT (IT Management,...
- Technology and Cyber Employee...
- Cyber Security Consultant
- Cyber Security Consultant (Pen...
- Platform and Services Engineer...