Senior WAF Engineer - Multi-Cloud Security & Bot Defense

W.T.W., Ltd.; Philippines; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

W.t.w., Ltd. in the Philippines seeks a seasoned WAF Engineer to design, tune and operate protective web application firewalls across multi-cloud environments, ensuring minimal false positives and robust prevention.

The role demands hands-on policy creation, threat analysis, incident response, and close collaboration with development teams to securely onboard internet-facing services. You will implement changes and lead security improvements in an enterprise setting.

Qualifications

• Experience investigating WAF false positives/negatives.
• Experience tuning WAF policies from Detection to Prevention.
• Development of custom WAF rules and rate-limiting controls.
• Knowledge of OWASP Top 10 and web attack vectors.
• Hands-on with attack mitigation and threat analysis.
• Experience with IaC (Terraform) in multi-cloud environments.

Responsibilities

• Analyse and tune WAF policies to minimise false positives/negatives.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead investigation and mitigation of web application attacks (OWASP Top 10, bot attacks, credential stuffing).
• Develop and enhance custom WAF rules and bot protection controls.
• Support transition of WAF policies from Detection to Prevention/Block mode.
• Provide technical leadership during incidents and root cause analysis.
• Collaborate with app owners and security stakeholders for secure onboarding.

Skills

WAF tuning

Threat analysis

Incident management

Stakeholder engagement

Mentoring

Education

Bachelor's degree in CS/Engineering/IT

Tools

Terraform

Azure Front Door

Azure Application Gateway WAF

Job description

W.t.w., Ltd. in the Philippines seeks a seasoned WAF Engineer to design, tune and operate protective web application firewalls across multi-cloud environments, ensuring minimal false positives and robust prevention.

The role demands hands-on policy creation, threat analysis, incident response, and close collaboration with development teams to securely onboard internet-facing services. You will implement changes and lead security improvements in an enterprise setting.