Cyber Security Engineer - WAF

Role & responsibilities

1. Implementation and Configuration:

• Deploy and configure F5/Imperva Web Application Firewall (WAF) solutions to protect web applications from various cyber threats.

• Collaborate with the IT and development teams to integrate WAF into the existing infrastructure seamlessly.

2. Policy Management:

• Develop and maintain security policies within WAF to ensure the protection of web applications according to organizational security standards.

• Regularly review and update security policies based on emerging threats and vulnerabilities.

3. Incident Response:

• Monitor and analyse WAF logs to detect and respond to security incidents promptly.

• Investigate and mitigate security incidents related to web application attacks.

4. Security Auditing and Compliance:

• Conduct regular security audits to ensure compliance with industry standards and regulatory requirements.

• Provide documentation and reports for compliance purposes.

5. Collaboration:

• Work closely with cross-functional teams, including network security, system administrators, and developers, to enhance overall security posture.

• Participate in security discussions and contribute to the development of security strategies.

Preferred candidate profile

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field.

• Proven experience in implementing and managing WAF solutions.

• In-depth knowledge of web application security concepts and best practices.

• Strong understanding of OWASP Top Ten and other common web application vulnerabilities.

• Experience with scripting languages (e.g., Python, Bash) for automation tasks.

• Relevant certifications such as Certified Secure Sphere Engineer are a plus.

Skills:

• Proficient in configuring and managing WAF.

• Strong analytical and problem-solving skills.

• Excellent communication and interpersonal skills.

• Ability to work independently and collaboratively in a team.

• Familiarity with other security technologies such as IDS/IPS is beneficial.

Experience:

• Minimum of 5 years of experience in implementing and managing F5/Imperva WAF.

• Experience with incident response and handling web application security incidents.