Network Security (WAF) Engineer

Description

The company is a Fortune 10 business that works across much of the healthcare sector, offering insights, products and services that help make quality care easier to reach and cheaper to receive.

This is a P3 level Network Security Engineer role focused on Web Application Firewalls. You will protect the company's global technology estate across cloud and on-premises platforms by designing, deploying and tuning security controls.

You will work alongside infrastructure, application and cybersecurity teams to secure internet-facing applications, tighten network controls and lower organisational risk. The job mixes hands-on engineering with advising teams on building security into their solutions, without sacrificing uptime or speed. You will also support incident response, risk reduction work and ongoing improvement of the company's security capabilities.

Responsibilities

• Build, run and update WAF protections for internet-facing applications, covering custom policies, rate limits, geo-blocking and threat detection rules.
• Manage network security controls such as firewall policies, segmentation, ingress and egress rules and secure access settings.
• Work with application, infrastructure and engineering teams to learn how their systems are built, how traffic moves and what the business needs, so controls are effective and can be sustained day to day.
• Review network traffic, security events and application behaviour to spot risks, look into concerns and sharpen detection.
• Assess, roll out and tune security tools and controls that guard against vulnerabilities, new threats and unauthorised access.
• Provide technical security expertise for incident response, forensic work, vulnerability remediation and disaster recovery planning.
• Write up security architectures, configurations, procedures and standards, and encourage good security habits across technology teams.

Requirements

• Basic requirements: at least 4 years implementing and supporting enterprise network security technology, such as firewalls, WAFs or intrusion prevention systems.
• Hands-on experience setting up and running WAF solutions that protect internet-facing applications and APIs.
• Experience designing, deploying and maintaining firewall rules, network segmentation and access management policies in enterprise settings.
• A solid grasp of TCP/IP, application traffic flow, DNS, HTTP/HTTPS and the principles of network security architecture.
• Experience reviewing network traffic and security logs to support investigations, threat detection and incident response.
• Experience assessing security risk, checking that controls work and finding ways to strengthen security posture.
• Strong technical writing skills, with experience producing documentation, security standards, procedures and configuration records.

Conditions

Preferred: a Bachelor's degree or an equivalent mix of education and experience, plus 4+ years in cybersecurity engineering, network security, infrastructure security or a closely related technical field.

Preferred: experience securing cloud environments and applications on AWS, Azure or another enterprise cloud platform.

Preferred: knowledge of operational technology (OT) security, supply chain security or the risks and controls around AI security.

Preferred: experience mentoring colleagues, providing technical leadership and driving security best practice and continuous improvement.

The base pay range is €52,500 to €87,500.

Pay depends on performance, experience and skills, equity, regular market reviews and geographic location, and is kept within applicable regulations.

Other compensation, such as an annual bonus or long-term incentives, may be offered on top of base pay.

Benefits

• A Total Rewards package with comprehensive benefits covering physical, mental and financial well-being.