WAF Platform Lead: Security Architect & Automation Advocate

Boehringer Ingelheim GmbH; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Boehringer Ingelheim's CISOC seeks a Web Application Firewall (WAF) System Lead to own and evolve the enterprise WAF service for critical web assets. You will drive strategy, governance, and operational excellence while partnering with global cybersecurity teams, application owners, infrastructure teams, and external vendors.

This role strengthens BI's cybersecurity posture through management of WAF technologies, policies, and monitoring, with hands-on leadership and mentoring for WAF admins

Qualifications

• Strong hands-on experience operating and governing enterprise Web Application Firewall services.
• Solid knowledge of HTTP/HTTPS, DNS, TLS, and reverse-proxy architectures.
• Experience with WAF policies, signatures, false positives, and DDoS protection.
• Experience managing incidents, service requests, changes, problems, access approvals and vendor support cases in an enterprise environment.
• Ability to define operating models, runbooks, standards, escalation processes and technical roadmaps.
• Working knowledge of ServiceNow or comparable service-management platforms and security monitoring or SIEM integrations.
• Automation or scripting experience using APIs, Python, Ansible, PowerShell or Bash.
• Excellent spoken and written English and experience working in an international, multicultural environment.

Responsibilities

• Own the WAF platform and service, including roadmap, lifecycle, architecture decisions, standards and service improvements.
• Act as the subject-matter expert and escalation point for complex WAF incidents, false positives, security events and operational requests.
• Define, approve and maintain operational runbooks, knowledge articles, support procedures and escalation paths for WAF Core L1 and L2 operations.
• Govern the onboarding, modification and offboarding of websites and use cases protected by the WAF.
• Oversee WAF security policies, signatures, DDoS and bot-protection settings, certificates, origin-server protection and exception handling.
• Coordinate vendor support cases, technical escalations, platform issues and product roadmap discussions.
• Provide functional training, onboarding guidance and mentoring to WAF administrators and operational teams.
• Ensure monitoring, audit and security logs are available to the relevant security teams and support incident investigation and detection use cases.
• Review privileged-access requests and ensure access is granted according to training, role and operational requirements.
• Follow BI processes and maintain the required service, operational and compliance documentation.

Skills

WAF Operations

DDoS protection

Incident management

Vendor coordination

Automation scripting

ServiceNow

Python

Tools

ServiceNow

SIEM

Python

PowerShell

Ansible

Job description

Boehringer Ingelheim's CISOC seeks a Web Application Firewall (WAF) System Lead to own and evolve the enterprise WAF service for critical web assets. You will drive strategy, governance, and operational excellence while partnering with global cybersecurity teams, application owners, infrastructure teams, and external vendors.

This role strengthens BI's cybersecurity posture through management of WAF technologies, policies, and monitoring, with hands-on leadership and mentoring for WAF admins