WAF Security Engineer: Automate, Scale & Protect

Lloyds Banking Group; Manchester; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Generous pension contribution

Annual bonus

Share schemes

Wellbeing initiatives

Parental leave policies

Job summary

Lloyds Banking Group is seeking an experienced software security engineer to lead design, implementation and evolution of Web Application Firewall platforms. You will protect critical customer-facing services at scale and drive secure-by-design practices across edge, data centre and cloud environments.

Working in a hybrid setup, you’ll autonomously implement WAF controls, develop IaC pipelines, and contribute to platform modernisation while reducing technical debt and improving observability for

Qualifications

• Hands-on experience with edge/on-prem/cloud-native WAF technologies.
• Strong understanding of HTTP/S, DNS, TLS and platform security concepts.
• Experience in Application Security, API Security, Bot Protection or Layer 7 DDoS mitigation.
• Automation and scripting skills (Python preferred) with IaC and CI/CD tooling.
• Ability to diagnose complex issues and propose robust solutions.

Responsibilities

• Design, implement and optimise WAF security controls.
• Develop and tune rules and policies to reduce false positives.
• Engineer new WAF capabilities using IaC, CI/CD and policy-as-code.
• Drive platform modernisation and reduce technical debt.
• Improve monitoring, alerting and telemetry for reliability and incident response.
• Support major incidents with cross-team collaboration.
• Produce high-quality documentation and runbooks.
• Participate in on-call rota with compensation.

Skills

WAF technologies

Automation

Python

CI/CD pipelines

Terraform

Security engineering

Monitoring & observability

Technical leadership

Tools

Terraform

CI/CD tooling

Job description

Lloyds Banking Group is seeking an experienced software security engineer to lead design, implementation and evolution of Web Application Firewall platforms. You will protect critical customer-facing services at scale and drive secure-by-design practices across edge, data centre and cloud environments.

Working in a hybrid setup, you’ll autonomously implement WAF controls, develop IaC pipelines, and contribute to platform modernisation while reducing technical debt and improving observability for