Senior WAF Engineer for Multi-Cloud & Bot Protection

WTW; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid working options

Private healthcare

Life insurance

Group income protection

Pension scheme (defined contribution)

Job summary

WTW is seeking a WAF Engineer to optimise and secure web applications across multi-cloud environments. The role focuses on tuning WAF policies, implementing custom rules, and leading incident response to protect customer data and services.

The candidate will collaborate with application teams and security stakeholders, and support change activities while ensuring strong security posture in a hybrid London setup.

Qualifications

• Proven expertise in investigating, analysing, and resolving WAF false positives/negatives.
• Strong expertise in implementing WAF solutions in Detection mode and transitioning to Prevention/Block mode.
• Proven ability to develop and maintain custom WAF rules and bot protection controls.
• Extensive knowledge of OWASP Top 10 and web attack vectors.

Responsibilities

• Perform analysis and tuning of WAF policies to minimise false positives/negatives while maintaining security posture.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead investigation and mitigation of web application attacks (OWASP Top 10, bot attacks, credential stuffing, scraping, Layer 7 DDoS).
• Develop and enhance custom WAF rules, exclusions, rate-limiting policies, and bot protection controls.
• Support transition of WAF policies from Detection to Prevention/Block mode with testing and stakeholder engagement.
• Analyse attack patterns and telemetry to identify emerging threats and mitigations.
• Collaborate with application owners and security teams for secure onboarding of internet-facing apps.

Skills

WAF tuning

Azure WAF

Terraform IaC

Multi-cloud

Incident response

Threat analysis

Policy tuning

Web app security

Education

Bachelor's degree in CS/Engineering/IT or related field

Tools

Azure Front Door WAF

Azure Application Gateway WAF

Terraform

Palo Alto Firewall

Cisco solutions

Job description

WTW is seeking a WAF Engineer to optimise and secure web applications across multi-cloud environments. The role focuses on tuning WAF policies, implementing custom rules, and leading incident response to protect customer data and services.

The candidate will collaborate with application teams and security stakeholders, and support change activities while ensuring strong security posture in a hybrid London setup.