WAF Engineering Lead: Secure, Multi-Cloud Defender

Willis Towers Watson; New York (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health and Welfare benefits

Paid holidays and PTO

401(k) with company contribution

Job summary

Willis Towers Watson seeks a WAF Engineering Lead to maximize operational performance and maintain a strong security posture for WTW services. You will oversee BAU support, policy and compliance, and drive change activities in a Tier 3 capacity with direct reports.

You will tune WAF policies across multi-cloud environments, lead investigations into web attacks (OWASP Top 10), develop custom WAF rules and mitigations, and guide secure onboarding of internet-facing applications while collaborating

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Technology strongly preferred, or relevant industry experience.
• Minimum 5 years’ leadership experience (direct reports) in similar role
• Minimum 5 years’ experience in IT or Telecoms industry. Financial Services experience preferred.
• Minimum 5 years’ Azure WAF/Network management experience
• Minimum 5 years’ Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.
• Demonstrable experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode.

Responsibilities

• Perform analysis and tuning of WAF policies to minimise false positives and false negatives while maintaining security posture.
• Design, implement, maintain and optimise WAF policies across multi-cloud environments.
• Lead investigation and mitigation of web application attacks including OWASP Top 10, bot attacks and DDoS.
• Develop and enhance custom WAF rules, managed rule exclusions, rate-limiting policies and bot protection controls.
• Support transition of WAF policies from Detection to Prevention/Block mode with testing and stakeholder engagement.
• Analyse attack patterns, logs and telemetry to identify emerging threats and mitigations.
• Collaborate with application owners and security stakeholders for secure onboarding of internet-facing apps.
• Provide SME for web app security, secure delivery and WAF best practices.
• Provide leadership to Audit & Compliance, Capacity, Lifecycle, Vulnerability and Risk Management Functions.

Skills

Leadership

WAF tuning

Incident response

Multi-cloud

Policy & compliance

Threat mitigation

Terraform

Azure WAF

Security best practices

Education

Bachelor’s degree in CS/Engineering/IT

Tools

Terraform

Azure Front Door WAF

Azure Application Gateway WAF

Palo Alto Firewall

Cisco Firewall/VPN

Job description

Willis Towers Watson seeks a WAF Engineering Lead to maximize operational performance and maintain a strong security posture for WTW services. You will oversee BAU support, policy and compliance, and drive change activities in a Tier 3 capacity with direct reports.

You will tune WAF policies across multi-cloud environments, lead investigations into web attacks (OWASP Top 10), develop custom WAF rules and mitigations, and guide secure onboarding of internet-facing applications while collaborating