> Markdown version of [/jobs/ext/2245555-information-security-engineer-waf-focused](https://www.wearedevelopers.com/jobs/ext/2245555-information-security-engineer-waf-focused). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer (WAF Focused) - **Company:** HOK Consulting - Technical Recruitment Consultancy - **Location:** Sheffield, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Application Firewall, Cyber Security, Information Technology Consulting, Custom Software, Intrusion Detection and Prevention, Network Security, Log Analysis, Open Web Application Security, Akamai, Software Security, Information Technology, Cybercrime, Enterprise Integration, Devsecops - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815088561-information-security-engineer-waf-focused ## About the Role * SOC / CSIRT / Threat Hunting or Security Forensics experience * AppSec / Ethical Hacking expertise with knowledge of OWASP Top 10 * Hands-on experience with 3+ WAF vendors (e.g., AWS, Akamai, F5, GCP) * Security Engineering or DevSecOps experience is a plus ## Description Information Security Engineer (WAF Focused) Information Security Engineer (WAF Focused) 1 day ago Be among the first 25 applicants Get AI-powered advice on this job and more exclusive features. Direct message the job poster from HOK Consulting - Technical Recruitment Consultancy I introduce talented IT Professionals to exciting contract opportunities within Banking & Financial Services Job Title: Information Security Engineer - WAF & Threat Detection Location: Hybrid (x3 days from Sheffield) Visa: No sponsorship available and No PSW visa We're seeking a skilled Information Secuirty Engineer with strong WAF experience to enhance the efficacy and security posture of our Web Application Firewalls across multiple platforms. The role involves crafting custom WAF rules, performing in-depth log analysis, and driving tuning and optimization to reduce false positives and ensure robust protection. Key Responsibilities: * Develop, test, and implement custom WAF rules and tuning strategies * Conduct efficacy testing and integrate results into CI/CD pipelines * Perform detailed log analysis to identify and mitigate false positives * Provide SME support on Web & API attack methods, evasions, and mitigations * Support DevSecOps teams in automation and security pipeline integration * Stay updated with evolving web threats and deliver security recommendations Ideal Background: * SOC / CSIRT / Threat Hunting or Security Forensics experience * AppSec / Ethical Hacking expertise with knowledge of OWASP Top 10 * Hands-on experience with 3+ WAF vendors (e.g., AWS, Akamai, F5, GCP) * Security Engineering or DevSecOps experience is a plus Seniority level * Seniority levelMid-Senior level Employment type * Employment typeContract Job function * Job functionInformation Technology * IndustriesComputer and Network Security, IT Services and IT Consulting, and IT System Custom Software Development Referrals increase your chances of interviewing at HOK Consulting - Technical Recruitment Consultancy by 2x Sign in to set job alerts for "Information Security Engineer" roles. We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [What the Heck is Edge Computing Anyway?](https://www.wearedevelopers.com/videos/593-what-the-heck-is-edge-computing-anyway) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)