Application Security Engineer (WAF/F5)

Terrabit Consulting; Malaysia; On-site; MYR 60,000 - 90,000; Full time

Job summary

Terrabit Consulting is seeking a security-focused engineer to support and maintain ASM/WAF implementations for web applications in Malaysia. You will handle hands-on work with leading web security products, including AppTrana, Akamai, Cloudflare, and WAF configurations with F5 LTM concepts such as Virtual IPs and SSL certificates.

The role emphasizes continuous monitoring, incident response, and policy refinement to defend against the OWASP Top 10 threats and evolving attack signatures.

Qualifications

• Hands-on experience with web security products and WAF implementations.
• Knowledge of F5 LTM concepts including Virtual IPs and SSL certificates.
• Ability to design and maintain ASM/WAF solutions and tune security policies.

Responsibilities

• Support and maintain ASM/WAF implementations and management.
• Monitor web application traffic for security threats and respond to incidents.
• Refine security policies based on evolving threats and application needs.
• Understand OWASP Top 10 and common vulnerabilities and attack signatures.
• Apply vulnerability management lifecycle principles to web apps.

Skills

Web security

Threat detection

Incident response

Tools

F5 LTM

Akamai WAF

Cloudflare WAF

AppTrana

AWA

Job description

Role & responsibilities

Task Description: Support & maintain the ASM/WAF implementation and management:

• Hand on experience on web security products e.g AppTrana, AWA, Cloudflare, Akamai F5 ASM/WAF implementation and management
• Working knowledge on F5 LTM - Virtual IPs, load balancing concepts, SSL certificates
• Design, implement and maintain F5 ASM solutions to protect web applications from security threats and vulnerabilities
• Security Policy Deployment and fine-tuning
• Continuously monitor web application traffic for potential security threats
• Analyze and respond to security incidents, providing real-time protection for web applications
• Understanding of web application security, OWASP Top 10 and common vulnerabilities
• Strong understanding on attack signatures
• Refining security policies based on the evolving threats and application requirement
• Knowledge of Vulnerability management lifecycle

Work Result: Ticket
Skill Area: Infrastructure
Technology: Infrastructure Security
Proficiency - Technology: Advanced
Secondary Skill Area: Other
Secondary Technology: Other
Proficiency - Secondary Technology: Advanced
Other Skills: Akamai F5, WAF and Incident Mgmt process

Preferred candidate profile