Web安全工程师

该职位来源于猎聘 We’re seeking an experienced, hands-on WAF Engineer to enhance and maintain our web application security, with a focus on onboarding new web resources and tuning WAF policies for optimal protection. Key Responsibilities:

• Onboard/migrating new web applications and resources, ensuring seamless integration with WAF solutions.
• Tune and optimize WAF rules through detailed log analysis, proactively identifying and mitigating false positives.
• Maintain up-to-date documentation for WAF configurations and tuning procedures.
• Collaborate with application and cross-functional teams to deliver consistent, best-practice WAF protection.
• Stay current with web security threats and trends, ensuring continuous improvement of WAF effectiveness.
• Support audit and compliance requirements through regular reviews and evidence maintenance. Key Requirements:
• Proven hands-on experience with at least two major WAF platforms (e.g. Tencent, Akamai, AWS).
• Strong background in onboarding and tuning WAF for new web resources, ideally in a financial services environment.
• Proficiency in log analysis tools (e.g. Splunk) and scripting for automation (e.g. Terraform) .
• Excellent communication skills for working with technical and non-technical stakeholders.
• Detail-oriented, proactive, and able to thrive in a fast-paced, regulated environment.