Act as a subject matter expert responsible for the design, implementation, and ongoing optimization of Web Application Firewall (WAF) solutions in a global enterprise environment
Focus on protecting web applications, APIs, and digital assets through scalable and resilient security controls
Collaborate with security, infrastructure, DevOps, and application teams to ensure effective threat mitigation and alignment with enterprise security standards
Design, configure, and optimize WAF policies, rules, and protection mechanisms
Develop and maintain custom security rules aligned with OWASP Top 10 and emerging threats
Monitor, analyze, and respond to WAF logs, alerts, and security events
Support implementation and tuning of WAF solutions in cloud and hybrid environments
Collaborate with cross-functional teams to ensure secure application and API exposure
Implement automation and scripting to improve WAF configuration, deployment, and governance
Provide guidance on application security, API protection, and edge security best practices
Participate in incident response activities related to web-based threats and attacks
Contribute to continuous improvement of the organization’s cybersecurity posture

Strong hands-on experience with Web Application Firewall (WAF) technologies
Knowledge of Akamai WAF or similar enterprise-grade WAF platforms
Solid understanding of HTTP/HTTPS, TLS, DNS, CDN architectures, and API security
Deep knowledge of OWASP Top 10 and common web application attack vectors
Experience with scripting and automation (Python, Bash, or PowerShell)
Familiarity with Infrastructure as Code tools such as Terraform is a plus
Knowledge of cloud environments such as AWS, Azure, or GCP
Experience with vulnerability management and secure application practices
Strong analytical and problem-solving skills
Excellent communication skills with the ability to interact with global teams
Fluent English is mandatory (written and spoken).

WAF Engineer

Key skills