Design, implement, evolve and maintain Web Application Firewall platforms protecting critical customer-facing services at scale
Design and continuously optimise WAF security controls, rules and policies
Engineer WAF capabilities using Infrastructure as Code, CI/CD pipelines and policy-as-code approaches
Contribute to platform modernisation, service improvements, refactoring, automation and technical-debt reduction
Improve monitoring, alerting and telemetry to strengthen platform reliability and incident response
Support diagnosis and resolution of major incidents with Security Engineering, Network and Cloud teams
Embed secure-by-design patterns and guardrails
Produce engineering documentation, standards, patterns, platform guidance and runbooks
Participate in the on-call rota
Influence technical direction and raise engineering standards across WAF and Layer 7 security services
Requirements
Hands-on experience of edge, on-premises or cloud-native WAF technologies
Solid understanding of networking and web fundamentals, including HTTP/S, DNS, TLS and platform security concepts
Experience in Application Security, API Security, Bot Protection, or Layer 7 DDoS mitigation
Strong automation and scripting skills; Python preferred
Practical experience using Infrastructure-as-Code tools; Terraform preferred
Experience with modern CI/CD pipelines
Ability to contribute to complex technical investigations, diagnose issues under pressure and develop robust solutions
Confidence to influence engineering decisions and contribute to the team’s technical direction
Professional-level cloud certifications and/or recognised security or network engineering accreditations would be great
Demonstrable experience with cloud-based data warehouse technologies would be great
Interest in or experience with developing AI solutions to augment security solutions would be great
Relevant transferable experience accepted; specific years of experience may be referenced but are not required here
Core Competencies
Demonstrates expertise in Web Application Firewall (WAF) technologies, including design, implementation, and optimization of security controls. Proficient in Infrastructure as Code, CI/CD pipelines, and automation to enhance platform reliability and incident response.
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.