Senior Engineer WAF
Core
Design, implement, and optimize Web Application Firewall (WAF) policies and edge security controls to protect web applications and APIs from threats like OWASP Top 10 vulnerabilities, bot attacks, and Layer 7 DDoS incidents.
Role type
Senior WAF Engineer
Builds
Secure web application and API infrastructure
Domain
Cybersecurity / Web Application Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
WAF policy design and tuning, OWASP Top 10 mitigation, rate limiting and bot mitigation, SIEM integration, Infrastructure-as-Code (IaC), scripting automation (PowerShell/Python), CI/CD integration, HTTP/HTTPS and REST API architecture knowledge
Preferred skills
Imperva platform expertise, API gateway security controls, cloud networking/CDN concepts, advanced bot detection techniques
Technologies
Imperva, Cloudflare, AWS WAF, Azure WAF, F5 ASM, Splunk, Sentinel, ELK, QRadar, Terraform, CloudFormation, ARM, Bicep, Jenkins, GitHub Actions, Azure DevOps, Python, PowerShell, Bash
Responsibilities
Design and manage WAF policies across dev/stage/prod environments; Configure and tune managed and custom rules to mitigate OWASP Top 10; Perform rule tuning and false-positive reduction using traffic baselining; Implement rate limiting, IP reputation, and geo/ASN controls; Integrate WAF logs with SIEM platforms; Support incident response for active attacks; Automate deployments using IaC and CI/CD pipelines; Conduct periodic security reviews and metrics tracking; Collaborate with app teams on secure configuration and compatibility testing
Seniority
Senior, hands-on IC
