WAF Engineer

We are currently recruiting for a Engineer with strong Azure WAF (Web Application Firewall) experience to join one of our Insurance clients on a 6 month contract.

Please note the role is Inside IR35 and remote working

Experience required:

• Experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.
• Developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.
• Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.
• Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.
• Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.
• Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments.
• Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms.
• Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.
• Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.