WAF Security Engineer: Cloud & Automation Focus

Lloyds; Manchester; On-site; GBP 80,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Pension

Share plans

Flexible working

Annual leave or holiday allowance

Job summary

Lloyds is seeking a senior engineer to design, implement and evolve our Web Application Firewall (WAF) platforms, protecting customer-facing services at scale. You will automate and secure our edge, data centre and cloud environments, influencing technical direction and engineering standards across teams.

The role emphasizes design of WAF controls, policy-as-code, and observability, with on-call responsibility and ownership of platform reliability, security and runbook documentation.

Qualifications

• Experience in Application Security, API Security, Bot Protection, and Layer 7 DDoS mitigation.
• Strong automation and scripting skills with practical IaC and CI/CD experience.
• Proven ability to influence engineering decisions and set security patterns.

Responsibilities

• Design, implement and continuously optimise WAF security controls and policies.
• Develop WAF capabilities using Infrastructure-as-Code, CI/CD pipelines and policy-as-code.
• Refactor and automate to reduce technical debt and improve platform resilience.
• Improve monitoring, telemetry and incident response for edge, data centre and cloud environments.
• Participate in on-call rotations and contribute to secure-by-design safeguards.

Skills

Python

Automation

Scripting

CI/CD

Tools

Terraform

Job description

Lloyds is seeking a senior engineer to design, implement and evolve our Web Application Firewall (WAF) platforms, protecting customer-facing services at scale. You will automate and secure our edge, data centre and cloud environments, influencing technical direction and engineering standards across teams.

The role emphasizes design of WAF controls, policy-as-code, and observability, with on-call responsibility and ownership of platform reliability, security and runbook documentation.