Open roleExternal
WAF & Application Security Engineer
- sheffield, england, United Kingdom
- Permanent·On-site
- Full time
- £90 - £120 Per Hour
Job Description
Role: WAF & Application Security Engineer
Location:
Sheffield, UK
Working Model:
Hybrid (2 or 3 days per week in office)
The Role:
We need a defender who thinks like a hacker. You will act as the WAF Subject Matter Expert, utilizing your offensive security skills to build robust defenses. You will be responsible for crafting, testing, and automating advanced Web Application Firewall (WAF) solutions to protect critical infrastructure from complex web and API attacks.
Key Responsibilities:
- Develop and refine complex, custom WAF rules to mitigate vulnerabilities and close security gaps.
- Reverse-engineer attacker tactics to proactively counter evasions.
- Write code to build testing mechanisms and seamlessly integrate them into CI/CD pipelines.
- Advise engineering teams on OWASP Top 10, emerging threats, and DevSecOps best practices.
What You Need:
- 7–11 years of Cyber Security experience.
- Mandatory Skills: Deep knowledge of Web Security (OWASP), and CI/CD Architecture.
- Strong background in Ethical Hacking / Penetration Testing .
- Proven ability to write custom WAF rules and automate security testing.
- Proficiency in at least one programming language and strong DevSecOps principles.