Senior Cloudflare & OPSWAT Security Engineer

Malomatia; Doha; Hybrid; QAR 180,000 - 300,000; Full time

Job summary

Malomatia seeks an experienced security engineer in Qatar to own end-to-end Cloudflare delivery including WAF rules, DNS, SSO apps, and Workers, with secondary knowledge of Palo Alto, Fortigate, and F5 platforms.

You will configure and tune WAFs, manage OPSWAT scanning, and ensure secure domain onboarding with robust policy enforcement. A Bachelor's in CS or Info Security is required, with 8+ years in app delivery and content security engineering.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.

Responsibilities

• Manage the Cloudflare environment across all onboarded domains, including DNS, WAF rules, rate limiting rules, custom hostnames, hostname lists, and IP lists.
• Own domain onboarding and lifecycle management within Cloudflare, ensuring a consistent security baseline and WAF rule set is applied to every domain.
• Configure and maintain Cloudflare SSO Applications (Zero Trust/Access) for secure application authentication.
• Develop, deploy, and maintain Cloudflare Workers for custom edge logic, traffic manipulation, and security automation.
• Build and maintain Cloudflare hostname lists and IP lists to support WAF, rate limiting, and access-control policies.
• Manage the OPSWAT file scanning platform for Data-in-Transit and Data-at-Rest content inspection; triage, analyze, and action file scan results, including false-positive review.
• Tune WAF rules and policies across Cloudflare and supporting platforms to reduce false positives while maintaining strong protection coverage.
• Provide administration and support for Palo Alto firewalls, including policy and rule management.
• Provide administration and support for Fortigate firewalls, including policy and rule management.
• Support F5 LTM/WAF administration: virtual servers, pools, health monitors, and WAF policy management.
• Support F5 GTM for global DNS-based load balancing, site failover, and health monitoring.
• Monitor Cloudflare analytics and logs — WAF events, rate-limiting triggers, and Worker performance — driving root-cause analysis for anomalies.
• Maintain accurate documentation of domain configurations, WAF rule sets, hostname/IP lists, SSO application configs, and secondary-platform settings.
• Coordinate with infrastructure and security teams on change management for major Cloudflare and firewall/WAF configuration changes.

Job description

Malomatia seeks an experienced security engineer in Qatar to own end-to-end Cloudflare delivery including WAF rules, DNS, SSO apps, and Workers, with secondary knowledge of Palo Alto, Fortigate, and F5 platforms.

You will configure and tune WAFs, manage OPSWAT scanning, and ensure secure domain onboarding with robust policy enforcement. A Bachelor's in CS or Info Security is required, with 8+ years in app delivery and content security engineering.