WAF Security Lead & Cloud Policy Architect

WTW; New York (NY); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health benefits

Pension plan

401(k)

Job summary

WTW is seeking an WAF Engineering Lead in the United States to maximise the performance and security of WTW services. You will lead multi-cloud WAF design, tuning, and incident response while supervising a team in a Tier 3 capacity.

You will analyze attack patterns, implement mitigations, and collaborate with owners to ensure secure onboarding of internet-facing apps. Strong Azure WAF expertise and leadership are required.

Qualifications

• Bachelor's degree in CS/Engineering/IT or equivalent industry experience.
• 5+ years of leadership experience with direct reports.
• 5+ years in IT/Telecoms, financial services preferred.
• 5+ years of Azure WAF/Network management experience.
• 5+ years of Network Security experience with Azure/Cisco/Palo Alto.
• Proven track record investigating and resolving WAF false positives/negatives.
• Experience transitioning WAF policies from Detection to Prevention/Block.
• Strong knowledge of OWASP Top 10 and web attack vectors.
• Hands-on with attack mitigation, threat analysis, and bespoke controls.
• Ability to work with stakeholders and deliver under pressure.

Responsibilities

• Analyze and tune WAF policies to reduce false positives/negatives while maintaining security posture.
• Design, implement, and optimise WAF rules across multi-cloud environments.
• Lead investigation and mitigation of web application attacks (OWASP Top 10, bot, credential stuffing).
• Develop and maintain custom WAF rules, exclusions, rate limits, and bot protection.
• Transition WAF policies from Detection to Prevention/Block through testing and tuning.
• Analyze logs/telemetry to identify emerging threats and apply mitigations.
• Collaborate with application owners and development teams for secure onboarding of apps.
• Provide SME guidance for web app security, secure delivery, and WAF best practices.
• Provide leadership to Audit, Compliance, Capacity, Lifecycle, Vulnerability, and Risk teams.
• Lead major incidents, drive rapid resolutions, and mentor direct reports.

Skills

Leadership

Azure WAF

WAF tuning

Incident response

Threat mitigation

Multi-cloud

OWASP Top 10

Bot protection

Security architecture

Education

Bachelor's degree in Computer Science/Engineering/IT

Tools

Terraform

Azure Front Door WAF

Azure Application Gateway WAF

Palo Alto Firewall

Cisco networking

Job description

WTW is seeking an WAF Engineering Lead in the United States to maximise the performance and security of WTW services. You will lead multi-cloud WAF design, tuning, and incident response while supervising a team in a Tier 3 capacity.

You will analyze attack patterns, implement mitigations, and collaborate with owners to ensure secure onboarding of internet-facing apps. Strong Azure WAF expertise and leadership are required.