WAF Security Engineer: Automation & Platform Security

Lloyds Banking Group; Wellington; Hybrid; GBP 49,000 - 55,000; Full time

Benefits offered by this job

Generous pension

Annual bonus

Share schemes

Wellbeing initiatives

Parental leave

Discounted shopping

28 days holiday

Job summary

Lloyds Banking Group is seeking a WAF Security Engineer to design, implement and evolve our Web Application Firewall platforms protecting customer-facing services at scale. You will work with automation, IaC and CI/CD to improve resilience, security and performance across edge, data center and cloud environments, with hybrid working and opportunities to influence technical direction.

You will produce high-quality engineering documentation, contribute to platform guidance and runbooks, and

Qualifications

• Hands-on experience with edge, on-premises or cloud-native WAF technologies.
• Solid understanding of HTTP/S, DNS, TLS and web security concepts.
• Experience in Application Security, API Security, Bot Protection, or Layer 7 DDoS mitigation.
• Strong automation and scripting skills (Python preferred).
• Experience with Infrastructure-as-Code tools and modern CI/CD pipelines.
• Ability to diagnose issues under pressure and influence decisions.

Responsibilities

• Design, implement, and optimise WAF controls and policies.
• Develop WAF capabilities using IaC, CI/CD and policy-as-code.
• Contribute to platform modernisation and reduce technical debt.
• Improve observability, monitoring, and incident response.
• Assist with major incident diagnosis and resolution with security teams.
• Produce runbooks and platform guidance for self-service delivery.
• Participate in on-call rota with compensation.

Skills

WAF engineering

Automation

Python scripting

Terraform IaC

CI/CD pipelines

Networking fundamentals

Security engineering

Tools

Terraform

CI/CD pipelines

Job description

Lloyds Banking Group is seeking a WAF Security Engineer to design, implement and evolve our Web Application Firewall platforms protecting customer-facing services at scale. You will work with automation, IaC and CI/CD to improve resilience, security and performance across edge, data center and cloud environments, with hybrid working and opportunities to influence technical direction.

You will produce high-quality engineering documentation, contribute to platform guidance and runbooks, and