Azure WAF Engineer - Remote IR35 Contract

Lorien; Greater London; Remote; GBP 83,000 - 120,000; Full time

Benefits offered by this job

Remote working

Job summary

Lorien is seeking an Engineer with strong Azure WAF experience for a 6-month contract in the United Kingdom. The role is Inside IR35 and offers remote working.

You will investigate WAF false positives/negatives, tune policies to move from detection to prevention, and develop custom rules to mitigate evolving threats. Candidates should have hands-on experience with Azure Front Door, Azure Application Gateway WAF, and IaC (Terraform) across multi-cloud environments.

Qualifications

• Experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through tuning and validation.
• Developing and maintaining custom WAF rules and rate limiting controls.
• Extensive knowledge of web application attack vectors including OWASP Top 10, SQLi, XSS, RCE, bot attacks and API abuse.
• Hands-on experience with attack mitigation and bespoke security controls based on observed patterns.
• Experience with bot protection technologies and policy tuning.

Responsibilities

• Investigate WAF alerts and false positives/negatives and provide remediation plans.
• Tune policies to move from detection to prevention/block with validation.
• Develop and maintain custom WAF rules, rule exclusions and rate limiting policies.
• Analyse threats and implement bespoke security controls based on attack patterns.
• Collaborate on multi-cloud WAF environments and IaC deployments using Terraform.

Skills

WAF tuning

Azure WAF

Threat analysis

Attack mitigation

Bot protection

Terraform

Multi-cloud

Policy tuning

API abuse

OWASP Top 10

Tools

Azure Front Door

Azure Application Gateway

Job description

Lorien is seeking an Engineer with strong Azure WAF experience for a 6-month contract in the United Kingdom. The role is Inside IR35 and offers remote working.

You will investigate WAF false positives/negatives, tune policies to move from detection to prevention, and develop custom rules to mitigate evolving threats. Candidates should have hands-on experience with Azure Front Door, Azure Application Gateway WAF, and IaC (Terraform) across multi-cloud environments.