WAF Engineering Lead

WTW; New York (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health benefits

Pension plan

401(k)

Job summary

WTW is seeking an WAF Engineering Lead in the United States to maximise the performance and security of WTW services. You will lead multi-cloud WAF design, tuning, and incident response while supervising a team in a Tier 3 capacity.

You will analyze attack patterns, implement mitigations, and collaborate with owners to ensure secure onboarding of internet-facing apps. Strong Azure WAF expertise and leadership are required.

Qualifications

• Bachelor's degree in CS/Engineering/IT or equivalent industry experience.
• 5+ years of leadership experience with direct reports.
• 5+ years in IT/Telecoms, financial services preferred.
• 5+ years of Azure WAF/Network management experience.
• 5+ years of Network Security experience with Azure/Cisco/Palo Alto.
• Proven track record investigating and resolving WAF false positives/negatives.
• Experience transitioning WAF policies from Detection to Prevention/Block.
• Strong knowledge of OWASP Top 10 and web attack vectors.
• Hands-on with attack mitigation, threat analysis, and bespoke controls.
• Ability to work with stakeholders and deliver under pressure.

Responsibilities

• Analyze and tune WAF policies to reduce false positives/negatives while maintaining security posture.
• Design, implement, and optimise WAF rules across multi-cloud environments.
• Lead investigation and mitigation of web application attacks (OWASP Top 10, bot, credential stuffing).
• Develop and maintain custom WAF rules, exclusions, rate limits, and bot protection.
• Transition WAF policies from Detection to Prevention/Block through testing and tuning.
• Analyze logs/telemetry to identify emerging threats and apply mitigations.
• Collaborate with application owners and development teams for secure onboarding of apps.
• Provide SME guidance for web app security, secure delivery, and WAF best practices.
• Provide leadership to Audit, Compliance, Capacity, Lifecycle, Vulnerability, and Risk teams.
• Lead major incidents, drive rapid resolutions, and mentor direct reports.

Skills

Leadership

Azure WAF

WAF tuning

Incident response

Threat mitigation

Multi-cloud

OWASP Top 10

Bot protection

Security architecture

Education

Bachelor's degree in Computer Science/Engineering/IT

Tools

Terraform

Azure Front Door WAF

Azure Application Gateway WAF

Palo Alto Firewall

Cisco networking

Job description

Description

The WAF Engineering Lead role is intended to maximise the operational performance of WTW services and maintain a strong secure posture. The role is accountable for BAU support of issues, controlling policy & compliance and supporting change activities. This role ensures the technical success of WAF services within the WTW environment in a Tier 3 capacity and management of direct reports.

The Role

• Perform analysis and tuning of WAF policies to minimise false positives and false negatives while maintaining an appropriate security posture.

• Design, implement, maintain and optimise WAF policies across multi-cloud environments.

• Lead the investigation and mitigation of web application attacks, including OWASP Top 10 threats, bot attacks, credential stuffing, scraping, Layer 7 DDoS attacks and other web-based threats.

• Develop, maintain and enhance custom WAF rules, managed rule exclusions, rate-limiting policies and bot protection controls.

• Support transition of WAF policies from Detection mode to Prevention/Block mode through structured analysis, tuning, testing and stakeholder engagement.

• Analyse attack patterns, logs and telemetry to identify emerging threats and implement effective mitigations.

• Work closely with application owners, development teams and security stakeholders to ensure secure onboarding and operation of internet-facing applications.

• Provide subject matter expertise for web application security, secure application delivery and WAF best practices.

• Provide technical leadership to Audit & Compliance, Capacity Management, Lifecycle Management, Vulnerability Management and Risk Management Functions.

• Provide leadership during major incidents and drive to quick resolutions.

• Provide line management for direct reports

• Point of escalation for areas of accountability

• Coach team members on a proactive basis, raising the team’s overall technical acumen.

• Restore service and complete root cause analysis of all incidents, driving actions to mitigate the root cause and remove risk of reoccurrence.

• Participate on the Technical Design Authority forum

• Implement changes/POCs to the environment in a controlled manner, with implementation and test plans.

Qualifications

The Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Technology strongly preferred, or relevant industry experience in related field.

• Minimum 5 years’ leadership experience (direct reports) in similar role

• Minimum 5 years’ experience in IT or Telecoms industry. Financial Services experience preferred.

• Minimum 5 years’ Azure WAF/Network management experience

• Minimum 5 years’ Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.

• Demonstrable experience investigating, analysing and resolving WAF false positives and false negatives.

• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.

• Proven experience developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.

• Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.

• Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.

• Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.

• Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments.

• Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms.

• Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.

• Experience supporting large-scale production environments with responsibility for change implementation, incident response and threat mitigation.

• Ability to blend creativity, problem solving, and technical skills for refining existing concepts or developing new approaches.

• Ability to enable changes in the business processes and ability to work cooperatively with stakeholders and peers is essential.

• Ability to work under pressure and to resolve issues effectively.

• Excellent interpersonal and communication skills.

Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity.

Compensation and Benefits

Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only).

Compensation

The base salary compensation range being offered for this role is $120,000.00-$160,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus.

Company Benefits

WTW provides a competitive benefit package which includes the following (eligibility requirements apply):

• Health and Welfare: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identity theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance, and other work/life resources.

• Leave Benefits: Paid Holidays, Annual Paid Time Off (includes state/local paid leave where required), Short-Term Disability, Long-Term Disability, Other Leaves (e.g., Bereavement, FMLA, ADA, Jury Duty, Military Leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles)

• Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans’ eligibility requirements.

Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records.

This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified.

EOE, including disability/vets