WAF/Firewall Engineer - Insurance
We are currently recruiting for a Engineer with strong WAF (Web Application Firewall) experience to join one of our Insurance clients on a 6 month contract.
Please note the role is Inside IR35 and remote working
Experience required:
- Experience investigating, analysing and resolving WAF false positives and false negatives.
- Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.
- Developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.
- Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.
- Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.
- Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.
- Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments.
- Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms.
- Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.
- Financial Services experience preferred
- Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.
If this role is of interest and would like to know more, please apply now!
Rate:
Not specified
Location:
City of London
IR35 Status:
Inside
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Not Specified