Application & Endpoint Security Engineer (WAF Specialist)

About the role

The role is responsible for implementing, configuring, monitoring and maintaining Web Application Firewalls (WAF) for internal and external customers. You will work closely with other cybersecurity teams to protect web applications from OWASP Top‑10 attacks and other threats.

Key responsibilities

• Provision end‑to‑end WAF deployments, gather requirements, define protection scope and create tailored security profiles.
• Fine‑tune security policies through rigorous testing to minimise false positives and support SOC monitoring.
• Plan and execute security enhancements, certificate updates and WAF upgrades while ensuring minimal impact on live traffic.
• Monitor WAF resources, licenses and vendor contracts, and raise alerts for any anomalies.
• Provide attack logs to the Incident Response team and integrate WAFs with SIEM, PAM, RSA, SolarWinds and other security controls.

Required profile

• Minimum 6 years of experience in WAF administration and web‑application security.
• Strong understanding of OWASP Top 10 vulnerabilities, network protocols and firewall technologies.
• BS degree in Computer Science, IT or related field; CEH or similar certification preferred.

Required skills

• WAF platforms (especially F5) and troubleshooting.
• OWASP Top 10 knowledge and web‑application security principles.
• Network protocols, firewall technologies and web server platforms.
• Scripting for automation (e.g., Python, Bash).
• Integration with SIEM, PAM, RSA, SolarWinds.