Senior WAF Engineer - Multi-Cloud Web Security

W.T.W., Ltd.; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

W.T.W., Ltd. is seeking a WAF Engineer to analyze, tune and implement robust WAF policies across multi-cloud environments. You will lead investigations into web attacks, develop custom WAF rules and bot protections, and drive the transition from detection to prevention modes, ensuring secure onboarding of internet-facing applications.

The role requires strong WAF experience, IAM and threat mitigation skills, and collaboration with security stakeholders to maintain a strong security posture.

Qualifications

• Proven WAF tuning to minimise false positives/negatives.
• Experience implementing WAF in Detection and Transition to Prevention modes.
• Develop and maintain custom WAF rules and rate-limiting policies.
• Extensive knowledge of OWASP Top 10 vulnerabilities and mitigations.
• Terraform or IaC experience for WAF infra.
• Experience with multi-cloud WAF deployments in enterprise contexts.

Responsibilities

• Analyse and tune WAF policies to minimise false positives and negatives.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead investigation and mitigation of web attacks including OWASP Top 10 threats and bot attacks.
• Develop and enhance custom WAF rules and bot protection controls.
• Support transition of WAF policies from Detection to Prevention mode with testing and stakeholder engagement.
• Collaborate with application teams to securely onboard internet-facing apps.

Skills

WAF expertise

Threat mitigation

Terraform

Multi-cloud

Incident response

Security engineering

Root cause analysis

Azure WAF

Education

Bachelor's degree in CS/EE/IT

Tools

Terraform

Azure Front Door

Azure Application Gateway

Job description

W.T.W., Ltd. is seeking a WAF Engineer to analyze, tune and implement robust WAF policies across multi-cloud environments. You will lead investigations into web attacks, develop custom WAF rules and bot protections, and drive the transition from detection to prevention modes, ensuring secure onboarding of internet-facing applications.

The role requires strong WAF experience, IAM and threat mitigation skills, and collaboration with security stakeholders to maintain a strong security posture.