Expert Engineer – Application & Endpoint Security

About the role

The role is responsible for implementing, configuring, monitoring and maintaining Web Application Firewalls (WAF) for internal and external customers. The engineer will work closely with other cybersecurity teams to protect web applications against OWASP Top 10 attacks and other threats.

Key responsibilities

• Provision end‑to‑end WAF deployments, gathering requirements, defining protection scope and creating tailored security profiles.
• Fine‑tune security policies through rigorous testing to minimise false positives and support SOC monitoring.
• Plan and execute security enhancements, certificate updates and policy adjustments with minimal impact on live traffic.
• Monitor WAF system resources, OS versions and vendor support, and perform upgrades after thorough validation.
• Provide attack logs to SOC/Incident Response teams and integrate WAF with SIEM, PAM, RSA, Solarwinds and other controls.
• Maintain comprehensive documentation, backup restoration tests and license/contract expiry tracking.

Required profile

• Minimum 6 years of experience in WAF administration and web application security.
• Relevant certifications such as Certified Ethical Hacker (CEH) preferred.
• Bachelor’s degree in Computer Science, Information Technology or related field.
• Strong analytical and problem‑solving abilities with effective communication skills.

Required skills

• WAF configuration and F5 troubleshooting.
• Web application security principles, OWASP Top 10 vulnerabilities.
• Network protocols, firewall technologies and web server platforms.
• SIEM, PAM, RSA, Solarwinds integration.
• Scripting languages for automation.