WAF Security Engineer — Edge & Cloud Defender

Lloyds Bank plc; Greater Manchester; Hybrid; GBP 49,000 - 55,000; Full time

Benefits offered by this job

Pension contribution up to 15%

Annual bonus subject to Group perfomrm

Share schemes

Job summary

Lloyds Banking Group is seeking a WAF Security Engineer in the UK to design, implement and evolve our Web Application Firewall platforms. You will protect customer-facing services at scale using modern engineering practices and automation, influencing technical direction and security posture across edge, data centre and cloud environments.

You will work with autonomy, shaping security controls, writing policy-as-code, and contributing to platform resilience, while operating within a hybrid work

Qualifications

• Experience with WAF technologies and security controls.
• Strong understanding of networking and web fundamentals (HTTP/S, TLS).
• Experience in Application Security, API Security, Bot Protection, or Layer 7 DDoS mitigation.

Responsibilities

• Design, implement and continuously optimise WAF security controls and policies.
• Develop and tune WAF rules using Infrastructure as Code and policy-as-code approaches.
• Modernise platforms through automation and reduction of technical debt.
• Improve observability, monitoring, and incident response across edge, data centre and cloud.
• Diagnose and resolve major incidents with cross-team collaboration.
• Produce runbooks and platform guidance to enable self-service delivery.

Skills

WAF technologies

Security engineering

Automation

Infrastructure as Code

Python scripting

CI/CD pipelines

Incident response

Tools

Terraform

CI/CD tooling

Cloud platforms

Job description

Lloyds Banking Group is seeking a WAF Security Engineer in the UK to design, implement and evolve our Web Application Firewall platforms. You will protect customer-facing services at scale using modern engineering practices and automation, influencing technical direction and security posture across edge, data centre and cloud environments.

You will work with autonomy, shaping security controls, writing policy-as-code, and contributing to platform resilience, while operating within a hybrid work