Senior F5 AWAF Engineer - Policy & Incident Response

Core4ce Careers; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

401(k) match

Medical, dental, vision coverage

Tuition assistance

Training and certifications

Parental leave

Paid time off

Job summary

Core4ce is seeking an experienced F5 Advanced WAF Engineer to support secure operation of enterprise web apps and APIs. You will work with cybersecurity teams to define policy baselines, tune policies, and reduce false positives while maintaining security enforcement.

The role includes alert analysis, incident support, and collaboration with application owners, developers, and infrastructure teams to improve WAF effectiveness and adoption across the environment.

Qualifications

• U.S. Citizen
• Ability to obtain and maintain an active Secret security clearance.
• Bachelor’s degree in cybersecurity, computer science, information technology, or related field, or equivalent practical experience.
• Minimum of 5 years of experience in cybersecurity, network security, or related field.
• Minimum of 3 years hands-on experience with F5 Advanced WAF/ASM or comparable platform.
• Experience developing, deploying, administering, and tuning F5 WAF policies.
• Experience collaborating with application owners, developers, and infrastructure teams.

Responsibilities

• Design, configure, implement, and maintain F5 AWAF/ASM policies for apps and APIs.
• Develop application-specific WAF baselines based on architecture and risk.
• Onboard new applications into the F5 WAF environment.
• Configure protections for OWASP Top 10 and common attacks.
• Review learning suggestions, traffic behavior, and policy recommendations.
• Move policies through staging and enforcement modes.
• Create and maintain policy exceptions and trusted traffic controls.
• Collaborate with system owners to understand legitimate behavior and tune policies.
• Monitor WAF violations and assist with incident response and remediation.

Skills

F5 WAF

WAF policy tuning

Threat analysis

Incident response

Policy automation

Security policy documentation

Education

Bachelor’s degree in cybersecurity/CS/IT

Tools

F5 BIG-IP

LTM

APM

iRules

SSL profiles

Splunk

Microsoft Sentinel

Job description

Core4ce is seeking an experienced F5 Advanced WAF Engineer to support secure operation of enterprise web apps and APIs. You will work with cybersecurity teams to define policy baselines, tune policies, and reduce false positives while maintaining security enforcement.

The role includes alert analysis, incident support, and collaboration with application owners, developers, and infrastructure teams to improve WAF effectiveness and adoption across the environment.