DontApply.Club
Login Register

Web Application Firewall Engineer

Hok Consulting Technical Recruitment — Poland · Posted ~17 hours ago

Senior Contract Hybrid

Skills

WAF architecture WAF configuration WAF tuning WAF migration Web application security API security SQL Injection XSS OWASP Penetration testing Vulnerability assessment WAF bypass testing Security policy optimisation GoTestWAF Scripting Coding WAF Go APIs

🔓 Log in to save this job, tailor your resume & track your apply process — 7 days free, no card needed.

Log in to add to target list

Summary ✨ AI‑Generated

Work as a Web Application Firewall specialist responsible for designing, configuring, tuning, and migrating WAF solutions. You will protect applications and APIs against common web attacks, conduct penetration and bypass testing, assess vulnerabilities, reduce false positives, automate security validation, and provide expert guidance on WAF security.

Highlights

Long-term contract with a security-focused role covering WAF architecture, application and API protection, automated security testing, continuous optimisation, and opportunities to provide specialist technical guidance.

Description

Job Title: Web Application Firewall Engineer Duration: long-term contract Location: Hybrid (Krakow/Warsaw, Poland) We are looking for a WAF Engineer to support WAF architecture, configuration, tuning, replacement, and security testing. The role will focus on protecting web applications and APIs, identifying WAF weaknesses and bypass techniques, and improving security policies through automated testing and continuous optimisation. Key Responsibilities Design, configure, and tune WAF solutions.Support WAF replacement, migration, and application/API onboarding.Create and optimise WAF policies against SQL Injection, XSS, API and OWASP attacks.Perform WAF penetration testing, bypass testing, and vulnerability assessments.Identify and resolve true/false positives and WAF policy weaknesses.Automate WAF security testing using GoTestWAF and similar tools.Develop scripts/coding solutions for WAF testing and policy validation.Act as a WAF SME/Consultant, providing technical guidance on WAF security and attack mitigation. Required Skills Strong experience in WAF architecture, configuration, tuning, and security testing.Hands-on experience with WAF and web/API security.Knowledge of WAF bypass techniques, penetration testing, OWASP, and common web attacks.Good coding/scripting and automation skills.Experience with GoTestWAF or similar WAF testing frameworks.