🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
CORE SKILLS/TECHNICAL REQUIREMENT - Strong experience with multiple WAF solutions for edge, cloud, and on-premise - Strong experience with cloud services and their WAF controls, ideally including one or more of the following: AWS, , and GCP - Strong understanding of Web Application security attack methods and mitigations - Proficiency in WAF tuning and configuration, coupled with a strong foundation in web security principles and practices. - Develop custom WAF rules and features, addressing gaps and enhancing overall security measures - Capability to design and implement bespoke WAF processes and documentation, underpinned by a thorough understanding of web application security. - Analytical skills to review and align platforms with MVP and Baseline Configurations, leveraging a deep knowledge of WAF functionalities and limitations. - Providing DevSecOps pipeline maintenance support for the automation works - Familiarity with IDAM protocols and access control measures for WAF management, informed by strong web security knowledge. - Understanding of HTTPS inspection, including Termination and Certificate management, grounded in robust web security practices. - Experience in rate limiting techniques and their integration into security configurations - Experience of version control and update mechanisms for WAF solutions - Competency in identifying and documenting platform and organizational logging options, with a focus on security implications and cloud environments. - Experience interfacing with SOC during WAF related security incidents General connectivity / network issue management / service management experience - OTHER SKILLS - Robust stakeholder management skills - Attention to detail in analysing large data sets - Excellent interpersonal skills with strong communication skills both written and verbally - Experience working in Agile, or knowledge of the key principles of the methodology Previous experience working on either Information Security/Cyber Security/IT Security projects and Infrastructure projects would be desirable. .