WAF System Lead - Drive Enterprise Web Security Roadmap

Boehringer Ingelheim GmbH; Muntinlupa; On-site; PHP 1,674,000 - 2,344,000; Full time

Job summary

Boehringer Ingelheim GmbH is seeking a Web Application Firewall System Lead within CISOC to own and evolve its WAF service, ensuring protection for critical web apps and assets. You will drive strategy, governance, and operational excellence while coordinating with global teams and external vendors.

The role emphasizes SME-level WAF leadership, incident management, and execution of runbooks, with collaboration across security, infrastructure and application owners in a multinational environment.

Qualifications

• Hands-on experience governing enterprise WAF services.
• Experience with Imperva Cloud WAF and/or Imperva SecureSphere.
• Knowledge of HTTP/HTTPS, DNS, TLS, reverse-proxy architectures.
• Experience in enterprise incident management and vendor coordination.
• Experience with security monitoring or SIEM integrations.

Responsibilities

• Own and govern the WAF platform, roadmap and runbooks.
• Escalate and resolve complex WAF incidents and false positives.
• Maintain policies, signatures, DDoS controls and bot protection.
• Coordinate vendor support cases and platform issues.
• Provide training and guidance to WAF administrators.
• Ensure logs and monitoring support incident investigation.

Skills

WAF administration

Imperva Cloud WAF

Imperva SecureSphere

Network security

Incident management

ServiceNow

Automation via APIs

Python scripting

English communication

Tools

ServiceNow

SIEM integrations

Job description

Boehringer Ingelheim GmbH is seeking a Web Application Firewall System Lead within CISOC to own and evolve its WAF service, ensuring protection for critical web apps and assets. You will drive strategy, governance, and operational excellence while coordinating with global teams and external vendors.

The role emphasizes SME-level WAF leadership, incident management, and execution of runbooks, with collaboration across security, infrastructure and application owners in a multinational environment.