Waf / Firewall Engineer - Insurance

Lorien; Greater London; A distancia; GBP 92.000 - 111.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work

Descripción de la vacante

Lorien is recruiting an WAF Engineer with strong Azure WAF experience to join an Insurance client on a 6-month contract in London.

The role is Inside IR35 with remote working. The ideal candidate will investigate WAF false positives/negatives, tune policies for prevention, and develop custom rules across Azure Front Door and Application Gateway, in multi-cloud environments.

Formación

• WAF expertise with Azure Front Door and Application Gateway in enterprise contexts.
• Experience reducing false positives/negatives and tuning prevention policies.
• Developing custom WAF rules and rate-limiting controls.

Responsabilidades

• Investigate, analyze and resolve WAF false positives/negatives.
• Tune policies to move from detection to prevention/block mode.
• Develop and maintain custom WAF rules and rate-limiting controls.
• Mitigate threats with bespoke security controls from observed attack patterns.
• Work across multi-cloud environments and IaC deployments (Terraform).

Conocimientos

Azure WAF

WAF tuning

Threat analysis

Incident analysis

Policy tuning to prevention

Custom WAF rules

Terraform / IaC

Azure Front Door WAF

Azure Application Gateway WAF

Multi-cloud experience

Security best practices

Educación

Herramientas

Terraform

Azure Front Door

Azure Application Gateway

Descripción del empleo

We are currently recruiting for a Engineer with strong Azure WAF (Web Application Firewall) experience to join one of our Insurance clients on a 6 month contract.

Please note the role is Inside IR35 and remote working

Experience required:

• Experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.
• Developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.
• Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.
• Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.
• Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.
• Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments.
• Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms.
• Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.
• Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.

WAF / Firewall Engineer - Insurance City of London, London