Information Security Engineer; WAF Focused

1 day ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from HOK Consulting - Technical Recruitment Consultancy

Job Title:
Information Security Engineer – WAF & Threat Detection

Location:
Hybrid (x3 days from Sheffield)

Visa:
No sponsorship available and No PSW visa

We're seeking a skilled Information Secuirty Engineer with strong WAF experience to enhance the efficacy and security posture of our Web Application Firewalls across multiple platforms. The role involves crafting custom WAF rules, performing in-depth log analysis, and driving tuning and optimization to reduce false positives and ensure robust protection.

Key Responsibilities:

• Develop, test, and implement custom WAF rules and tuning strategies
• Conduct efficacy testing and integrate results into CI/CD pipelines
• Perform detailed log analysis to identify and mitigate false positives
• Provide SME support on Web & API attack methods, evasions, and mitigations
• Support Dev Sec Ops  teams in automation and security pipeline integration
• Stay updated with evolving web threats and deliver security recommendations

Ideal Background:

• SOC / CSIRT / Threat Hunting or Security Forensics experience
• App Sec / Ethical Hacking expertise with knowledge of OWASP Top 10
• Hands-on experience with 3+ WAF vendors (e.g., AWS, Akamai, F5, GCP)
• Security Engineering or Dev Sec Ops  experience is a plus

• Seniority level
  
  Mid-Senior level

• Employment type
  
  Contract

• Job function
  
  Information Technology
• Industries Computer and Network Security, IT Services and IT Consulting, and IT System Custom Software Development

Referrals increase your chances of interviewing at HOK Consulting - Technical Recruitment Consultancy by 2x

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.