WAF / Firewall Engineer - Insurance

WAF / Firewall Engineer - Insurance We are currently recruiting for a Engineer with strong Azure WAF (Web Application Firewall) experience to join one of our Insurance clients on a 6 month contract. Please note the role is Inside IR35 and remote working Experience required: Experience investigating, analysing and resolving WAF false positives and false negatives. Strong experience implementing WAF solutions in Detection mode and transitioning policies to Prevention/Block mode through appropriate tuning and validation. Developing and maintaining custom WAF rules, rule exclusions, rate limiting controls and attack mitigation policies, rather than solely relying on out-of-the-box managed rules. Extensive knowledge of web application attack vectors, including OWASP Top 10 vulnerabilities, SQL Injection, Cross-Site Scripting (XSS), Remote Code Execution (RCE), bot attacks, credential stuffing and API abuse. Hands-on experience with attack mitigation, threat analysis and creation of bespoke security controls based on observed attack patterns. Strong understanding of bot protection technologies, managed rule sets, policy tuning and wider web application security best practices. Experience with Azure Front Door WAF and Azure Application Gateway WAF in enterprise-scale environments. Experience working across multi-cloud environments and/or vendor-agnostic WAF platforms. Experience deploying and managing WAF infrastructure using Terraform or other Infrastructure as Code (IaC) technologies. Financial Services experience preferred Network Security experience. Azure Firewall, Palo Alto Firewall/VPN, Cisco would be advantageous. If this role is of interest and would like to know more, please apply now! Guidant, Carbon60, Lorien & SRG - The Vertage Group Portfolio are acting as an Employment Business in relation to this vacancy.