Waf Engineer

W.T.W., Ltd.; Philippines; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

W.t.w., Ltd. in the Philippines seeks a seasoned WAF Engineer to design, tune and operate protective web application firewalls across multi-cloud environments, ensuring minimal false positives and robust prevention.

The role demands hands-on policy creation, threat analysis, incident response, and close collaboration with development teams to securely onboard internet-facing services. You will implement changes and lead security improvements in an enterprise setting.

Qualifications

• Experience investigating WAF false positives/negatives.
• Experience tuning WAF policies from Detection to Prevention.
• Development of custom WAF rules and rate-limiting controls.
• Knowledge of OWASP Top 10 and web attack vectors.
• Hands-on with attack mitigation and threat analysis.
• Experience with IaC (Terraform) in multi-cloud environments.

Responsibilities

• Analyse and tune WAF policies to minimise false positives/negatives.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead investigation and mitigation of web application attacks (OWASP Top 10, bot attacks, credential stuffing).
• Develop and enhance custom WAF rules and bot protection controls.
• Support transition of WAF policies from Detection to Prevention/Block mode.
• Provide technical leadership during incidents and root cause analysis.
• Collaborate with app owners and security stakeholders for secure onboarding.

Skills

WAF tuning

Threat analysis

Incident management

Stakeholder engagement

Mentoring

Education

Bachelor's degree in CS/Engineering/IT

Tools

Terraform

Azure Front Door

Azure Application Gateway WAF

Job description

WAF Engineer

Company: W.t.w., Ltd.

Job Type: Full Time Philippines

Job Description - WAF Engineer

Description

Duties and Responsibilities

• Perform analysis and tuning of WAF policies to minimise false positives and false negatives while maintaining an appropriate security posture.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead the investigation and mitigation of web application attacks, including OWASP Top 10 threats, bot attacks, credential stuffing, scraping, Layer 7 DDoS attacks and other web-based threats.
• Develop, maintain and enhance custom WAF rules, managed rule exclusions, rate-limiting policies and bot protection controls.
• Support transition of WAF policies from Detection mode to Prevention/Block mode through structured analysis, tuning, testing and stakeholder engagement.
• Analyse attack patterns, logs and telemetry to identify emerging threats and implement effective mitigations.
• Work closely with application owners, development teams and security stakeholders to ensure secure onboarding and operation of internet-facing applications.
• Provide subject matter expertise for web application security, secure application delivery and WAF best practices.
• Provide technical support toAudit & Compliance, Capacity Management, Lifecycle Management, Vulnerability Managementand Risk ManagementFunctions.
• Provide technical leadership during major incidents and drive to quick resolutions.
• Coach team members on a proactive basis, raising the team’s overall technical acumen.
• Restore service and complete root cause analysis of all incidents, driving actions to mitigate the root cause and remove risk of reoccurrence.
• Participate on the Technical Design Authority forum
• Implement changes/POCs to the environment in a controlled manner, with implementation and test plans.

Qualifications

• Demonstrable experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.
• Proven experience developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.
• Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.
• Hands‑on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.
• Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.
• Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise‑scale environments.
• Experience working across multi-cloud environments and/or vendor‑agnostic WAF platforms.
• Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.
• Experience supporting large-scale production environments with responsibility for change implementation, incident response and threat mitigation.
• Bachelor’s degree in Computer Science, Engineering, Information Technology strongly preferred, or relevant industry experience in related field.
• Minimum 5 years’ experience in IT or Telecoms industry. Financial Services experience preferred.

WTW is an Equal Opportunity Employer