Senior Cloudflare WAF & App Security Engineer

Help AG

Dubai

Hybrid

AED 300,000 - 480,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Health insurance

Annual flights tickets

Flexible/Hybrid working environment

Open door policy

Career progression opportunities

Job summary

Help AG in Dubai seeks a Senior Security Engineer specializing in Cloudflare WAF/WAAP, DDoS protection, bot management and API security. The role covers onboarding, policy tuning, and security event analysis across cloud and hybrid environments.

You will design secure web architectures, manage incidents, and drive production migrations while collaborating with SOC, network, cloud and application teams. F5/Akamai/Imperva WAF experience is valued and a mentorship focus is present.

Qualifications

6+ years in Network Security/Cybersecurity with hands-on WAF/App Security experience.
Strong Cloudflare WAF/Application Security expertise mandatory.
Experience with F5/Akamai/Imperva WAF platforms is advantageous.
Solid understanding of HTTP/HTTPS, DNS, SSL/TLS, TCP/IP, web app architecture and reverse proxy concepts.

Responsibilities

Lead WAF and App Security solution design and implementation, focusing on Cloudflare WAF/WAAP.
Design WAF security architectures and traffic flows for internet-facing apps, APIs, CDN and hybrid/cloud environments.
Develop and implement Cloudflare WAF policies, managed/custom rules, rate limiting and DDoS protection.
Design application onboarding, DNS routing, SSL/TLS config and production traffic migration/cutover plans.
Translate security requirements into WAF policies balancing security, performance and availability.
Perform WAF policy planning, rule staging, testing, validation and controlled production deployment.
Lead cross-functional discussions to define designs and security requirements.
Prepare implementation designs, standards, rollout plans and technical docs.