WAF Engineer (Imperva) - Hybrid - Permanent Position

iBSC; City Of London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A global financial infrastructure company is seeking a WAF Engineer to deploy and support WAF solutions in a hybrid work environment. The role involves incident resolution and participation in security projects, necessitating at least 3 years of hands-on WAF experience and knowledge of related technologies. Ideal candidates are team players with strong analytical skills and a focus on security. Competitive salary offered.

Qualifications

• Minimum 3 years of hands-on WAF experience.
• Good knowledge of the 7 layers of the OSI model.
• Experience with HTTP, HTTPS, SSL, TLS/mTLS.
• Knowledge of authentication technologies (SAML/OAUTH).

Responsibilities

• Deploy, support, and maintain WAF solutions in customer security team.
• Participate in security and business-related projects.
• Resolve incidents related to security products.
• Participate in automation and continuous improvement.
• Take on Watch Duty role (24/7/365) to manage evolving threats.

Skills

WAF hands on expertise

Knowledge of OSI model

Knowledge of HTTP, HTTPS, SSL, TLS/mTLS

Knowledge of Authentication technologies (SAML/OAUTH)

Development in Python

Tools

Imperva WAF/WAAP

Terraform

Ansible

Linux/Unix (RedHat)

Job description

Title

WAF Engineer (Imperva)

Location

(Please choose 1) - Hybrid 8 days a month onsite is Non-Negotiable

In order of Priority Locations

• Krakow - Poland
• Amsterdam - Netherlands
• Brussels - Belgium
• London - UK

Work Type

Permanent (Full-time) Position

Language

English Speaking

Note

We do not offer freelance or contract arrangements for this role

As a global critical financial infrastructure, the protection of CLIENTS information and assets is fundamental to the company's business. Information Security is at the core of our services, firmly Embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office in charge of putting in place the required controls to adequately and effectively protect our information assets.

Your role

1. Deploy, support and maintain our WAF solution (cloud and on-prem) in our Customer Security team.
2. Participate in Projects related to security and business on the CLIENTS roadmap.
3. Resolve incidents related to security products and solution in place.
4. Participate in the automation process and continuous improvement process.
5. Participate in the Watch Duty role. (24/7/365) to face the evolving threats (Global Cyber Security team).
6. Participate to the transformation of the team to Agile.

Technical skills (mandatory ones)

• WAF hands on expertise is required (minimum 3 years)
• Good knowledge of the 7 layers of the OSI model.
• Good knowledge of HTTP, HTTPS, SSL, TLS/mTLS
• Knowledge Authentication technologies. (SAML/OAUTH/)
• Knowledge and/or experience of Imperva WAF/WAAP on premise, SAAS and/or Cloud are a clear asset
• Development: Python, other languages are an asset.

Nice to have:

1. Terraform/Ansible knowledge & Automation experience
2. Be a geek in one specific technical domain - can be outside of the ones mentioned here above.
3. Agile, Scrum, Devops knowledges are assets
4. CISSP and/or OSCP are assets

Others

1. PKI knowledge
2. Reverse Proxies: Apache HTTPD, NGINX are assets.
3. Basic networking knowledge (Layer 3, 4)
4. Linux/Unix System Engineer (RedHat)
5. Language: English

Soft skills

1. Team player and supporter.
2. Client focus.
3. Open Minded.
4. Eager to learn and evolve
5. Understanding a problem in a global context and being able to think out of the box (complex analysis)
6. Can express well-founded opinions and positions and understand their consequences (judgement)