Azure WAF Engineer: Secure Web Apps & Threat Mitigation

Willis Towers Watson; Philippines; On-site; PHP 1,339,000 - 2,009,000; Full time

Job summary

Willis Towers Watson is seeking a WAF Engineer to maximize the performance of WTW services and maintain a secure posture. The role covers BAU support, policy compliance and change activities in a Tier 3 capacity.

Responsibilities include tuning WAF policies, designing multi-cloud rules, mitigating attacks, and leading incident response. Collaboration with developers and security stakeholders is essential to secure internet-facing applications.

Qualifications

• Experience investigating WAF false positives and false negatives.
• Experience tuning WAF in Detection and Prevention modes through validation.
• Developing and maintaining custom WAF rules and rate-limiting policies.
• Knowledge of OWASP Top 10 and web-based attack vectors.
• Hands-on attack mitigation, threat analysis and bespoke security controls.

Responsibilities

• Perform analysis and tuning of WAF policies to minimise false positives and false negatives while maintaining a strong security posture.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead the investigation and mitigation of web application attacks including OWASP Top 10 threats and bot attacks.
• Develop, maintain and enhance custom WAF rules and bot protection controls.
• Support transition of WAF policies from Detection to Prevention/Block mode through testing and stakeholder engagement.
• Analyse attack patterns, logs and telemetry to identify emerging threats and mitigations.
• Work with application teams to secure onboarding and operation of internet-facing apps.
• Provide SME for web app security, delivery and WAF best practices.
• Provide technical leadership during major incidents and drive rapid resolutions.
• Restore service and perform root cause analysis to mitigate recurrence.

Skills

WAF analysis

Policy tuning

Incident response

Root cause analysis

Threat mitigation

Azure WAF

Multi-cloud security

Tools

Azure Front Door WAF

Azure Application Gateway WAF

Threat telemetry tools

Job description

Willis Towers Watson is seeking a WAF Engineer to maximize the performance of WTW services and maintain a secure posture. The role covers BAU support, policy compliance and change activities in a Tier 3 capacity.

Responsibilities include tuning WAF policies, designing multi-cloud rules, mitigating attacks, and leading incident response. Collaboration with developers and security stakeholders is essential to secure internet-facing applications.