Senior WAF Engineer — Proactive Web App Security

Motion Recruitment; Irving (TX); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Job summary

Motion Recruitment is seeking an experienced WAF Engineer to join an outbound inbound Web Application Security team focused on protecting enterprise web applications at the Layer 7 / application layer.

The role emphasizes preventative security and hands-on work with Imperva Cloud WAF, Cloudflare WAF/ASM, and TLS/DNS troubleshooting, collaborating with development teams to minimize disruption while strengthening protections.

Qualifications

• Hands-on experience as a WAF Engineer or Web Application Security Engineer.
• Strong understanding of Web Application Firewall technologies.
• Experience protecting web applications at Layer 7.
• Strong understanding of inbound web traffic and HTTP/HTTPS protocols.
• Experience troubleshooting WAF‑related connectivity and security issues.

Responsibilities

• Manage, configure, monitor, and troubleshoot WAF technologies protecting enterprise web applications.
• Protect inbound web applications and services at the Layer 7 / application layer.
• Analyze HTTP/HTTPS traffic and troubleshoot web application connectivity and security issues.
• Troubleshoot HTTPS/TLS-related issues, including certificate, handshake, and secure‑connection problems.
• Troubleshoot and analyze DNS-related issues affecting web applications and inbound traffic.
• Investigate WAF traffic, security policies, rules, alerts, blocks, and false positives.
• Analyze application traffic patterns to determine whether requests should be allowed, challenged, or blocked.
• Work with application and development teams to understand application behavior and resolve WAF-related issues.
• Configure and tune WAF policies to provide appropriate application protection while minimizing disruption to legitimate users.
• Support onboarding of applications into WAF platforms and ensure appropriate security controls are implemented.
• Troubleshoot application availability issues related to WAF configuration, routing, DNS, HTTPS, or security policies.
• Review Layer 7 traffic and security events to identify potential application‑level threats.
• Collaborate with application, infrastructure, cloud, and security teams to implement preventative security controls.
• Support proactive security improvements designed to prevent incidents before they occur.
• Document WAF configurations, troubleshooting procedures, application onboarding requirements, and operational processes.
• Participate in technology enhancements, WAF policy improvements, and application security initiatives.
• Provide technical guidance to application teams regarding inbound web traffic and WAF security requirements.

Skills

WAF Engineer

Web App Security

Layer 7 Security

HTTPS Troubleshooting

DNS Troubleshooting

HTTP/HTTPS Protocols

WAF Policy Tuning

Tools

Imperva Cloud WAF

Cloudflare WAF

Imperva ASM

Job description

Motion Recruitment is seeking an experienced WAF Engineer to join an outbound inbound Web Application Security team focused on protecting enterprise web applications at the Layer 7 / application layer.

The role emphasizes preventative security and hands-on work with Imperva Cloud WAF, Cloudflare WAF/ASM, and TLS/DNS troubleshooting, collaborating with development teams to minimize disruption while strengthening protections.