F5 WAF Lead Engineer

Match Point Solutions; St. Louis (MO); Remote; USD 177,000 - 198,000; Full time

Job summary

MatchPoint Solutions is seeking an experienced F5 WAF Lead Engineer to own and drive enterprise WAF policy transformation. You will set strategy, build automation, and implement tailored, per‑application policies across a large portfolio while staying hands‑on in policy tuning and deployment.

The role requires strong F5 WAAP expertise, experience with custom per‑application policies, and a proactive, client‑facing mindset. This remote assignment spans 6 months with a competitive hourly rate.

Qualifications

• 5+ years of experience in web application firewall engineering.
• Experience designing and implementing custom, per-application WAF policies.
• Experience conducting web application vulnerability assessment and remediation.
• Strong understanding of OWASP Top 10 and emerging web threats.
• Experience leveraging AI/automation tooling to scale security operations.
• Ability to operate as both a strategic lead and hands-on implementer.
• Experience with F5 Silverline and/or BIG-IP ASM.
• Familiarity with cloud-hosted application architectures.

Responsibilities

• Define and lead the strategy for transitioning from broad WAF rules to per-application, tailored policies across a large portfolio.
• Design and build an AI-assisted policy development workflow using data to generate tailored WAF policies.
• Evaluate and implement F5 Distributed Cloud WAAP policies per application basis.
• Integrate findings from vulnerability tools into policy development workflow.
• Partner with client cybersecurity leadership to define milestones and deliverables.
• Establish repeatable methodology and documentation for scaling the practice.

Skills

F5 Distributed Cloud WAAP

WAF engineering

AI-assisted tooling

Cloud-hosted architectures

Strong communication

Tools

F5 Silverline

BIG-IP ASM

Job description

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

Job Title: F5 Wap Lead Engineer

Location: remote

Duration: 6 months

Pay rate: $85-95hr W2

Job Description

Responsibilities

F5 WAF Lead Engineer

We are seeking an experienced F5 WAF Lead Engineer to own and drive the transformation of enterprise web application firewall security - moving from broad, generic rule sets to application-specific, tailored WAF policies across a large application portfolio. This is not a maintenance or administration role: the ideal candidate combines deep hands-on F5 WAF/XC expertise with the ability to set direction, define methodology, and build the automation and AI-assisted tooling needed to operate at scale. The engineer will work directly with client security leadership to define strategy and milestones, while remaining hands-on in building, tuning, and implementing policy.

Key Responsibilities

• Define and lead the strategy for transitioning from broad WAF rules to per-application, tailored security policies across a large application portfolio.
• Design and build an AI-assisted policy development workflow - using scan output, traffic data, and application configuration to recommend and generate tailored WAF policies at scale.
• Evaluate, recommend, and implement F5 Distributed Cloud (XC) WAAP policies on an application‑by‑application basis.
• Integrate findings from vulnerability and penetration testing tools into the policy development process.
• Partner directly with client cybersecurity leadership to define deliverables, direction, and rollout milestones.
• Establish repeatable methodology and documentation so the practice can scale as volume grows and the team expands.
• Support and mentor additional team members as the engagement scales.
• Troubleshoot complex WAF policy, traffic, and security issues across cloud‑hosted environments.
• Support incident response and root cause analysis for WAF/application security events.
• Coordinate change management and production deployment windows for policy rollouts. Required Qualifications
• 5+ years of experience in web application firewall engineering, with strong hands‑on expertise in F5 Distributed Cloud (XC) WAAP.
• Demonstrated experience designing and implementing custom, per‑application WAF policies (not just baseline/default rule sets).
• Experience conducting web application vulnerability assessment and remediation.
• Strong understanding of OWASP Top 10 and emerging web application threats.
• Experience leveraging AI/automation tooling to scale security operations (policy generation, evaluation, or triage).
• Ability to operate as both a strategic lead (defining direction, engaging client stakeholders) and a hands‑on implementer.
• Experience with F5 Silverline and/or BIG‑IP ASM/Advanced WAF (prior‑generation context).
• Familiarity with cloud‑hosted application architectures.
• Excellent communication skills - able to present strategy and status to client security leadership. Preferred Qualifications
• Experience integrating SAST/SCA/DAST/pen‑test tooling into WAF policy workflows.
• F5 Certified Technology Specialist (CTS) or equivalent.
• Experience with regulated environments (PCI, SOX, HIPAA).
• Knowledge of Zero Trust and API security frameworks.
• Familiarity 

Technical Skills

F5 Technologies: F5 Distributed Cloud (XC) WAAP, F5 Silverline, BIG‑IP ASM/Advanced WAF (legacy context)

Security: Web Application Firewall (WAF) policy design, OWASP Top 10, AI-assisted security tooling, application security, API security, vulnerability assessment, threat mitigation

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.