Security Engineer – WAF / Application Security

About the role

We are seeking an experienced Security Engineer specialized in Web Application Firewall (WAF) and application security. You will work on complex, mission‑critical environments across on‑premise, hybrid, and cloud infrastructures, protecting enterprise applications from sophisticated threats.

Key responsibilities

• Design, implement and manage advanced WAF solutions in enterprise settings.
• Analyze application security requirements and create tailored security policies.
• Perform threat modeling and enhance application protection strategies.
• Configure and optimise WAF policies, signatures, custom rules and iRules.
• Defend against DoS/DDoS attacks, bots and targeted application threats.
• Manage SSL/TLS certificates and advanced HTTP/S security configurations.
• Develop custom security rules such as XML/JSON policies and custom signatures.
• Produce technical documentation, operational playbooks and runbooks.
• Support security assessments, audits and compliance initiatives.
• Participate in incident response and remediation activities.
• Provide knowledge transfer and guidance on application security best practices.

Required profile

• Proven hands‑on experience with at least one major WAF technology (F5, Fortinet, Imperva, AWS WAF or similar).
• Strong knowledge of HTTP/S, web protocols and SSL/TLS certificate management.
• Experience in high‑criticality sectors such as banking, finance, telco or public sector.
• Good command of English (minimum B1/B2 level).

Required skills

• F5, Fortinet, Imperva, or cloud‑native WAF platforms
• AWS WAF, Azure WAF, GCP security services
• HTTP/S, SSL/TLS, iRules, custom signatures, XML/JSON policies
• DoS/DDoS mitigation, bot protection, API security
• Automation, monitoring and logging tools
• Zero Trust architecture concepts
• Secure application design principles
• Familiarity with security standards such as ISO 27001, PCI‑DSS, OWASP ASVS, MITRE ATT&CK

What we offer

• Opportunity to work on challenging, mission‑critical security projects.
• Collaboration with experienced professionals in a dynamic environment.
• Exposure to cutting‑edge security technologies across on‑premise, hybrid and cloud platforms.