WAF / Firewall Engineer - Insurance

Project overview

WAF / Firewall Engineer - Insurance

We are currently recruiting for a Engineer with strong Azure WAF (Web Application Firewall) experience to join one of our Insurance clients on a 6 month contract.

Please note the role is Inside IR35 and remote working

Experience required:

If this role is of interest and would like to know more, please apply now!

Guidant, Carbon60, Lorien & SRG - The Vertage Group Portfolio are acting as an Employment Business in relation to this vacancy.

• Experience investigating, analysing and resolving WAF false positives and false negatives.
• Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation.
• Developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules.
• Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse.
• Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns.
• Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices.
• Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments.
• Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms.
• Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies.
• Financial Services experience preferred
• Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous.

Project details

• Start: flexible
• Location: City of London, London, GB