WAF & Application Security Architect - 6-Month Contract - £650/day Inside IR35

Opus Recruitment Solutions Ltd; City Of London; Remote; GBP 125,000 - 150,000; Part time

Job summary

A recruitment firm seeks a WAF & Application Security SME for a 6-month contract. The position is fully remote (UK-based) and offers a day rate of £650. Candidates should have a strong background in SOC, AppSec, or Ethical Hacking, along with extensive experience in WAF platforms and log analysis tools. Responsibilities include designing WAF rules and supporting DevSecOps pipeline integration.

Qualifications

• Strong background in SOC, AppSec, or Ethical Hacking.
• Deep understanding of OWASP Top 10 and web security principles.
• Hands-on experience with WAF platforms (Akamai, F5, AWS, GCP).
• Skilled in log analysis tools (e.g. Splunk, Wireshark).

Responsibilities

• Design and implement custom WAF rules to address security gaps.
• Conduct detailed log analysis to identify and mitigate false positives.
• Support DevSecOps pipeline integration and automation of efficacy testing.
• Advise on web/API attack vectors and mitigation strategies.
• Provide SME input on WAF PoCs, new features, and cost-effective solutions.
• Maintain clear documentation of tuning procedures and configurations.

Skills

SOC experience

AppSec knowledge

Ethical Hacking

Log analysis

Communication skills

Tools

WAF platforms (Akamai, F5, AWS, GCP)

Log analysis tools (e.g. Splunk, Wireshark)

Job description

Overview

WAF & Application Security SME Contract: 6 Months. Day Rate: £650 (Inside IR35). Location: Fully Remote (UK-based).

Responsibilities

• Design and implement custom WAF rules to address security gaps
• Conduct detailed log analysis to identify and mitigate false positives
• Support DevSecOps pipeline integration and automation of efficacy testing
• Advise on web/API attack vectors and mitigation strategies
• Provide SME input on WAF PoCs, new features, and cost-effective solutions
• Maintain clear documentation of tuning procedures and configurations

Experience Required

• Strong background in SOC, AppSec, or Ethical Hacking
• Deep understanding of OWASP Top 10 and web security principles
• Hands-on experience with WAF platforms (e.g. Akamai, F5, AWS, GCP)
• Skilled in log analysis tools (e.g. Splunk, Wireshark)
• Excellent problem-solving and communication skills