WAF Security Engineer - Hybrid & Cloud Security Leader

Lloyds Banking Group; Leeds; Hybrid; GBP 49,000 - 55,000; Full time

Benefits offered by this job

Hybrid Working

Job Share

Job summary

Lloyds Banking Group in the UK is seeking a WAF Security Engineer to design, implement and evolve our Web Application Firewall platforms, protecting customer‑facing services at scale. You’ll work with automation and secure‑by‑design practices across edge, data centre and cloud environments.

With hybrid working and a 35‑hour week, you’ll have autonomy to influence technical direction, develop WAF capabilities using IaC and CI/CD, and contribute to platform resilience.

Qualifications

• Experience with edge, on-premises or cloud-native WAF technologies.
• Strong understanding of HTTP/S, DNS, TLS and web security concepts.
• Automation and scripting skills (Python) with IaC and CI/CD experience.
• Ability to investigate complex incidents and develop robust solutions.
• Confidence to influence engineering decisions and technical direction.

Responsibilities

• Design, implement and optimise WAF security controls.
• Engineer new WAF capabilities using Infrastructure as Code and CI/CD.
• Refactor and modernise platforms, reducing technical debt.
• Improve monitoring, alerting and telemetry for resilience.
• Support incident diagnosis and coordinate with Security, Network and Cloud teams.
• Embed secure‑by‑design patterns and runbooks for self‑service delivery.
• Participate in the on‑call rota with additional compensation.

Skills

WAF technologies

Networking fundamentals

Python scripting

Terraform

CI/CD pipelines

Incident response

Security engineering

Tools

Terraform

Job description

Lloyds Banking Group in the UK is seeking a WAF Security Engineer to design, implement and evolve our Web Application Firewall platforms, protecting customer‑facing services at scale. You’ll work with automation and secure‑by‑design practices across edge, data centre and cloud environments.

With hybrid working and a 35‑hour week, you’ll have autonomy to influence technical direction, develop WAF capabilities using IaC and CI/CD, and contribute to platform resilience.