WAF Engineer

Lorien; Greater London; Remote; GBP 83.000 - 120.000; Vollzeit

Benefits dieser Stelle

Remote working

Zusammenfassung

Lorien is seeking an Engineer with strong Azure WAF experience for a 6-month contract in the United Kingdom. The role is Inside IR35 and offers remote working.

You will investigate WAF false positives/negatives, tune policies to move from detection to prevention, and develop custom rules to mitigate evolving threats. Candidates should have hands-on experience with Azure Front Door, Azure Application Gateway WAF, and IaC (Terraform) across multi-cloud environments.

Qualifikationen

• Experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through tuning and validation.
• Developing and maintaining custom WAF rules and rate limiting controls.
• Extensive knowledge of web application attack vectors including OWASP Top 10, SQLi, XSS, RCE, bot attacks and API abuse.
• Hands-on experience with attack mitigation and bespoke security controls based on observed patterns.
• Experience with bot protection technologies and policy tuning.

Aufgaben

• Investigate WAF alerts and false positives/negatives and provide remediation plans.
• Tune policies to move from detection to prevention/block with validation.
• Develop and maintain custom WAF rules, rule exclusions and rate limiting policies.
• Analyse threats and implement bespoke security controls based on attack patterns.
• Collaborate on multi-cloud WAF environments and IaC deployments using Terraform.

Kenntnisse

WAF tuning

Azure WAF

Threat analysis

Attack mitigation

Bot protection

Terraform

Multi-cloud

Policy tuning

API abuse

OWASP Top 10

Tools

Azure Front Door

Azure Application Gateway

Jobbeschreibung

We are currently recruiting for a Engineer with strong Azure WAF (Web Application Firewall) experience to join one of our Insurance clients on a 6 month contract.

Please note the role is Inside IR35 and remote working

Experience required:

• Experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.
• Developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.
• Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.
• Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.
• Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.
• Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments.
• Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms.
• Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.
• Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.