> Markdown version of [/jobs/ext/3639132-web-application-firewall-engineer](https://www.wearedevelopers.com/jobs/ext/3639132-web-application-firewall-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Web Application Firewall Engineer

- **Company:** Vylor, Inc.
- **Location:** Des Moines, IA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Application Firewall, Microsoft Azure, Botnet, Cloud Computing, Cyber Security, Data Security, DDoS Mitigation, Domain Name System (DNS), Intrusion Detection and Prevention, Open Web Application Security, Akamai, Reverse Proxy, Security Information and Event Management, Software Engineering, Web Applications, Data Logging, Load Balancing, Software Security, Cloudflare
- **Published:** October 8, 2026
- **Apply:** https://www.agcareers.com/vylor/web-application-firewall-engineer-job-1046313.cfm

## About the Role

* Bachelor''s degree or equivalent experience preferred.
 * 7-10 years of experience with WAF technologies and/or networking.
 * Hands-on experience administering enterprise WAF platforms such as Akamai, Cloudflare, F5, Imperva, or Azure/AWS WAF.
 * Deep understanding of OWASP Top 10, API security, bot mitigation, DDoS protection, and web application attack patterns.
 * Experience tuning WAF rules, reducing false positives, and balancing security controls with application availability.
 * Knowledge of HTTP/S, TLS, DNS, CDN, reverse proxy, load balancing, and web application architectures.
 * Experience partnering with application, infrastructure, cloud, and security operations teams to onboard and protect applications.
 * Familiarity with SIEM/SOAR integrations, logging, alerting, incident response, and threat detection workflows.Ability to document standards, operational procedures, exceptions, and risk-based decisions.
 * Preferred certifications could include CISSP, CSSLP, GIAC, AWS/Azure security, or vendor-specific WAF certifications.
 * Strong analysis and problem-solving skills and the ability to develop processes and methodologies.
 * Ability to rapidly learn and take advantage of new concepts, business models, and technologies.
 * Ability to prioritize work to meet tight deadlines and customer needs.
 * Ability to communicate effectively with strong oral, written, and presentation skills.

## Description

The Web Application Firewall Engineer is responsible for developing, evaluating and managing systems security across the enterprise. This role will work closely with the application development teams to assess applications in development as well as in production. The Web Application Firewall Engineer will help safeguard applications and data from threats and define and drive the implementation of these capabilities., * Configure, tune, test, and optimize Web Application Firewall (WAF) policies and rules to protect web applications and APIs from threats such as OWASP Top 10 vulnerabilities, automated attacks, malicious payloads, and suspicious traffic patterns.

 * Monitor WAF alerts, application traffic, and security events to identify threats, investigate anomalies, reduce false positives, and recommend appropriate remediation actions.
 * Partner with application development, infrastructure, cloud, and network teams to understand application behavior, define security requirements, and implement WAF controls with minimal business disruption.
 * Assists in the development and implementation of security policies and procedures.
 * Instrumental in data security, regulatory compliance, DDoS mitigation, application protection, and threat detection.
 * Prepares status reports on security matters to develop security risk analysis scenarios and response procedures.
 * Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls.
 * Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.
 * Provides direct support to the business and IT staff for systems security related issues.
 * Participates in on-call to support WAF operations, respond to security events, troubleshoot urgent production issues, and coordinate timely escalation or remediation as needed.