WAF Specialist Cloudflare

Pracovný režim

• Remote work
• full-time
• Start date: asap

Odmeňovanie

• From 2 500 EUR/month
• basic salary from 2500 gross depends on candidate's experience

Náplň práce

We are seeking a skilled and security-focused colleague with deep expertise in WAF to join a team responsible for protecting critical infrastructure. You will play a role in securing web applications, automating cloud security configurations, and supporting an agile environment. This is an excellent opportunity for someone passionate about cloud security, WAF technologies, and modern automation practices.

Key Responsibilities:

• Implementation, configuration, and management of WAF, including custom rule sets, rate limiting
• Layer 7 DDoS Mitigation: Designing and monitoring defences against application-layer floods (HTTP/S floods) to ensure high availability
• Monitor and fine-tune web traffic security policies to safeguard against evolving threats.
• Log Analysis & Forensics: Investigating security incidents using Logshare or Security Analytics to identify attack patterns and reduce false positives
• Collaborate with application, infrastructure, and DevOps teams to embed security into pipelines and workflows.
• Work with other WAF platforms across environments.
• Automate security configurations and tasks.
• Apply an understanding of network protocols, TLS/mTLS, and authentication mechanisms (eg, OAuth, SAML).
• Support and troubleshoot security issues.
• Contribute to a DevSecOps culture, embracing continuous improvement, Agile delivery, and cross-functional collaboration.

Požiadavky a zručnosti

Required Skills & Experience:

• Minimum 3 years of hands-on experience with WAF - policy management, custom rules, and advanced security configurations.
• Skills with the OSI model, especially Layers 3-7.
• Knowledge of HTTP, HTTPS, SSL, TLS, mTLS.
• Familiarity with authentication protocols such as SAML, OAuth, or similar.
• Scripting skills in Python (other programming languages are a plus).
• Solid understanding of PKI and certificate management.
• Experience with Linux/Unix systems, ideally.
• Solid networking knowledge.

Jazyky

• English - Upper intermediate (B2)