WAF Security Engineer

• Design, implement, evolve and maintain Web Application Firewall platforms protecting critical customer-facing services at scale
• Design and continuously optimise WAF security controls, rules and policies
• Engineer WAF capabilities using Infrastructure as Code, CI/CD pipelines and policy-as-code approaches
• Contribute to platform modernisation, service improvements, refactoring, automation and technical-debt reduction
• Improve monitoring, alerting and telemetry to strengthen platform reliability and incident response
• Support diagnosis and resolution of major incidents with Security Engineering, Network and Cloud teams
• Embed secure-by-design patterns and guardrails
• Produce engineering documentation, standards, patterns, platform guidance and runbooks
• Participate in the on-call rota
• Influence technical direction and raise engineering standards across WAF and Layer 7 security services

• Hands-on experience of edge, on-premises or cloud-native WAF technologies
• Solid understanding of networking and web fundamentals, including HTTP/S, DNS, TLS and platform security concepts
• Experience in Application Security, API Security, Bot Protection, or Layer 7 DDoS mitigation
• Strong automation and scripting skills;
  Python preferred
• Practical experience using Infrastructure-as-Code tools;
  Terraform preferred
• Experience with modern CI/CD pipelines
• Ability to contribute to complex technical investigations, diagnose issues under pressure and develop robust solutions
• Confidence to influence engineering decisions and contribute to the team’s technical direction
• Professional-level cloud certifications and/or recognised security or network engineering accreditations would be great
• Demonstrable experience with cloud-based data warehouse technologies would be great
• Interest in or experience with developing AI solutions to augment security solutions would be great
• Relevant transferable experience accepted; specific years of experience may be referenced but are not required here

Demonstrates expertise in Web Application Firewall (WAF) technologies, including design, implementation, and optimization of security controls. Proficient in Infrastructure as Code, CI/CD pipelines, and automation to enhance platform reliability and incident response.

• Web Application Firewall (WAF) Technologies
• Infrastructure as Code (IaC)
• CI/CD Pipelines
• Application Security
• Python Scripting

• WAF Design and Implementation
• Network Fundamentals
• HTTP/S
• DNS
• TLS
• API Security
• Bot Protection
• Layer 7 DDoS Mitigation
• Terraform
• Cloud-Based Data Warehouse Technologies

• Problem-Solving
• Influencing Engineering Decisions
• Technical Direction Contribution

• Professional-Level Cloud Certificates
• Security Engineering Accreditations
• Network Engineering Accreditations

• Incident Response
• Monitoring and Alerting
• Secure-by-Design Patterns
• Automation
• Technical-Debt Reduction