WAF Cloud security Engineer

CORE SKILLS/TECHNICAL REQUIREMENT

• Strong experience with multiple WAF solutions for edge, cloud, and on-premise

• Strong experience with cloud services and their WAF controls, ideally including one or more of the following: AWS, Azure, and GCP

• Strong understanding of Web Application security attack methods and mitigations

• Proficiency in WAF tuning and configuration, coupled with a strong foundation in web security principles and practices.

• Develop custom WAF rules and features, addressing gaps and enhancing overall security measures

• Capability to design and implement bespoke WAF processes and documentation, underpinned by a thorough understanding of web application security.

• Analytical skills to review and align platforms with MVP and Baseline Configurations, leveraging a deep knowledge of WAF functionalities and limitations.

• Providing DevSecOps pipeline maintenance support for the automation works

• Familiarity with IDAM protocols and access control measures for WAF management, informed by strong web security knowledge.

• Understanding of HTTPS inspection, including Termination and Certificate management, grounded in robust web security practices.

• Experience in rate limiting techniques and their integration into security configurations

• Experience of version control and update mechanisms for WAF solutions

• Competency in identifying and documenting platform and organizational logging options, with a focus on security implications and cloud environments.

• Experience interfacing with SOC during WAF related security incidents

• General connectivity / network issue management / service management experience OTHER SKILLS

• Strong stakeholder management skills

• Attention to detail in analysing large data sets

• Excellent interpersonal skills with strong communication skills both written and verbally

• Experience working in Agile, or knowledge of the key principles of the methodology

• Previous experience working on either Information Security/Cyber Security/IT Security projects and Infrastructure projects would be desirable.

• Positively contribute and work to team objectives.

• Self-starter, who can work pro-actively with minimum supervision