Back
08/22/2026

WAF Engineering Lead

Job Description

The WAF Engineering Lead role is intended to maximise the operational performance of WTW services and maintain a strong secure posture. The role is accountable for BAU support of issues, controlling policy & compliance and supporting change activities. This role ensures the technical success of WAF services within the WTW environment in a Tier 3 capacity and management of direct reports.

 

 

The Role

 

  • Perform analysis and tuning of WAF policies to minimise false positives and false negatives while maintaining an appropriate security posture.
  • Design, implement, maintain and optimise WAF policies across multi-cloud environments.
  • Lead the investigation and mitigation of web application attacks, including OWASP Top 10 threats, bot attacks, credential stuffing, scraping, Layer 7 DDoS attacks and other web-based threats.
  • Develop, maintain and enhance custom WAF rules, managed rule exclusions, rate-limiting policies and bot protection controls.
  • Support transition of WAF policies from Detection mode to Prevention/Block mode through structured analysis, tuning, testing and stakeholder engagement.
  • Analyse attack patterns, logs and telemetry to identify emerging threats and implement effective mitigations.
  • Work closely with application owners, development teams and security stakeholders to ensure secure onboarding and operation of internet-facing applications.
  • Provide subject matter expertise for web application security, secure application delivery and WAF best practices.

  • Provide technical leadership to Audit & Compliance, Capacity Management, Lifecycle Management, Vulnerability Management and Risk Management Functions.

  • Provide leadership during major incidents and drive to quick resolutions.

  • Provide line management for direct reports

  • Point of escalation for areas of accountability

  • Coach team members on a proactive basis, raising the team’s overall technical acumen.

  • Restore service and complete root cause analysis of all incidents, driving actions to mitigate the root cause and remove risk of reoccurrence.

  • Participate on the Technical Design Authority forum

  • Implement changes/POCs to the environment in a controlled manner, with implementation and test plans.

     


Apply Now
Apply Now
WTW
WTW

Where we are

We have colleagues all around the world, working remotely or in our offices. Together, we make a difference for clients in over 140 countries and markets, from the Middle East to Latin America, from Manila to New York.