Senior Cloud WAF Engineer

Senior Cloud WAF Engineer

Purpose

Design, implement, and optimize Cloud WAF policies and controls to secure applications, minimize false positives, and ensure protection against application-layer attacks.

Key Responsibilities

• Configure and manage WAF policies across cloud platforms
• Implement rule sets (managed + custom) aligned to OWASP and enterprise baseline
• Analyze WAF alerts and logs to:
• Reduce false positives
• Improve detection accuracy
• Manage exclusions, whitelisting, and rule tuning
• Block IoCs (IPs, domains, URLs) across WAF layers
• Respond to web application attacks and support incident investigations
• Perform pre-deployment testing for new policies and rules
• Validate impact on applications and ensure minimal disruption
• Troubleshoot:
• Blocked application traffic
• Failed connectivity
• Performance degradation
• Perform RCA and recommend corrective actions
• Work with DevOps and application teams to secure onboarding
• Support integration with API gateways, CDNs, and load balancers
• Ensure policies adhere to security standards and compliance requirements
• Maintain documentation, change logs, and audit evidence

Qualifications & Experience

• Experience
• 510 years in Network / Application Security
• Hands-on experience with WAF platforms in enterprise environments
• Technical Skills
• Strong hands-on expertise in Cloud WAFs such as Azure WAF, AWS WAF, Cloudflare, Imperva, and F5.
• Good understanding of HTTP / HTTPS protocols, headers, cookies, reverse proxy architecture, request flow, application-layer attacks, load balancers, reverse proxies, and API gateways.