WAF Engineer

Cadmus

1d

About The Position

The WAF Engineer will act as a subject matter expert responsible for the design, implementation, and ongoing optimization of Web Application Firewall (WAF) solutions in a global enterprise environment. The role focuses on protecting web applications, APIs, and digital assets through scalable and resilient security controls. The engineer will collaborate with security, infrastructure, DevOps, and application teams to ensure effective threat mitigation and alignment with enterprise security standards, with a strong emphasis on modern WAF platforms, including Akamai.

Requirements

• Strong hands-on experience with Web Application Firewall (WAF) technologies
• Knowledge of Akamai WAF or similar enterprise-grade WAF platforms
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN architectures, and API security
• Deep knowledge of OWASP Top 10 and common web application attack vectors
• Experience with scripting and automation (Python, Bash, or PowerShell)
• Knowledge of cloud environments such as AWS, Azure, or GCP
• Experience with vulnerability management and secure application practices
• Strong analytical and problem-solving skills
• Excellent communication skills with the ability to interact with global teams
• Fluent English is mandatory (written and spoken)
• 5+ years of hands-on experience working with WAF technologies
• 6+ years of overall experience in IT, with a focus on cybersecurity or application security

Nice To Haves

• Familiarity with Infrastructure as Code tools such as Terraform is a plus
• Experience in global or enterprise-scale environments is highly preferred
• Experience with Akamai ecosystem (WAF, CDN, edge security)
• Background in API security and modern application architectures
• Relevant security certifications such as CISSP, CISM, CISA, or GIAC are a plus

Responsibilities

• Design, configure, and optimize WAF policies, rules, and protection mechanisms
• Develop and maintain custom security rules aligned with OWASP Top 10 and emerging threats
• Monitor, analyze, and respond to WAF logs, alerts, and security events
• Support implementation and tuning of WAF solutions in cloud and hybrid environments
• Collaborate with cross-functional teams to ensure secure application and API exposure
• Implement automation and scripting to improve WAF configuration, deployment, and governance
• Provide guidance on application security, API protection, and edge security best practices
• Participate in incident response activities related to web-based threats and attacks
• Contribute to continuous improvement of the organization’s cybersecurity posture

What This Job Offers

• Job Type: Full-time
• Career Level: Senior