Information Security Engineer (WAF Focused)

Information Security Engineer (WAF Focused)

Information Security Engineer (WAF Focused)

1 day ago Be among the first 25 applicants

Direct message the job poster from HOK Consulting - Technical Recruitment Consultancy

I introduce talented IT Professionals to exciting contract opportunities within Banking & Financial Services

Job Title: Information Security Engineer – WAF & Threat Detection

Location: Hybrid (x3 days from Sheffield)

Visa: No sponsorship available and No PSW visa

We're seeking a skilled Information Secuirty Engineer with strong WAF experience to enhance the efficacy and security posture of our Web Application Firewalls across multiple platforms. The role involves crafting custom WAF rules, performing in-depth log analysis, and driving tuning and optimization to reduce false positives and ensure robust protection.

Key Responsibilities:

• Develop, test, and implement custom WAF rules and tuning strategies
• Conduct efficacy testing and integrate results into CI/CD pipelines
• Perform detailed log analysis to identify and mitigate false positives
• Provide SME support on Web & API attack methods, evasions, and mitigations
• Support DevSecOps teams in automation and security pipeline integration
• Stay updated with evolving web threats and deliver security recommendations

Ideal Background:

• SOC / CSIRT / Threat Hunting or Security Forensics experience
• AppSec / Ethical Hacking expertise with knowledge of OWASP Top 10
• Hands-on experience with 3+ WAF vendors (e.g., AWS, Akamai, F5, GCP)
• Security Engineering or DevSecOps experience is a plus

Seniority level

Seniority level

• Mid-Senior level

Employment type

Employment type

• Contract

Job function

Job function

• Information Technology

Industries

• Computer and Network Security, IT Services and IT Consulting, and IT System Custom Software Development

Referrals increase your chances of interviewing at HOK Consulting - Technical Recruitment Consultancy by 2x

Sign in to set job alerts for “Information Security Engineer” roles.

We’re unlocking community knowledge in a new way.

Report this job