> Markdown version of [/jobs/ext/4582949-f5-advanced-web-application-firewall-awaf-engineer](https://www.wearedevelopers.com/jobs/ext/4582949-f5-advanced-web-application-firewall-awaf-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# F5 Advanced Web Application Firewall (AWAF) Engineer

- **Company:** WAF, LLC
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Applications Architecture, Software System Penetration Testing, Cloud Computing, Configuration Management, Cyber Security, Event Logging, Network Security, Open Web Application Security, Performance Tuning, Security Information and Event Management, Software Deployment, Systems Integration, Web Applications, Transport Layer Security, Software Security, Information Technology, Data Analytics, Microsoft Sentinel, Restful APIs, Splunk, Big Ip, Vulnerability Analysis, Microservices
- **Published:** November 5, 2026
- **Apply:** https://jobs.military.com/career/387194/f5-advanced-web-application-firewall-engineer-south-carolina-sc-charleston

## About the Role

* Bachelor's degree in cybersecurity, computer science, information technology, or a related technical field, or equivalent practical experience. \n
 * Minimum of 5 years of experience in cybersecurity, network security, application security, or a related field. \n
 * Minimum of 3 years of hands-on experience with F5 Advanced WAF, F5 ASM, or a comparable enterprise WAF platform. \n
 * Demonstrated experience developing, deploying, administering, and tuning F5 WAF policies. \n
 * Experience establishing application-specific WAF policy baselines and enforcement requirements. \n
 * Experience working directly with application owners, developers, and infrastructure teams to analyze application behavior and resolve false positives. \n
 * Experience analyzing WAF logs, violations, security events, and blocked traffic. \n
 * Working knowledge of web application and API security concepts, including: \n, * Strong knowledge of common web application vulnerabilities and attack techniques, including the OWASP Top 10. \n
 * Experience assisting with cybersecurity alert triage, incident investigation, or incident-response activities. \n
 * Ability to document technical findings, policy decisions, exceptions, and recommended actions. \n
 * Excellent written and verbal communication skills. \n, * F5 Certified Technology Specialist certification or equivalent F5 AWAF/ASM experience. \n
 * Experience with F5 BIG-IP administration and related technologies, including LTM, APM, iRules, Local Traffic Policies, and SSL profiles. \n
 * Experience protecting APIs, microservices, cloud-hosted applications, and distributed application architectures. \n
 * Experience with F5 WAF policy automation, REST APIs, configuration management, or infrastructure-as-code. \n
 * Experience integrating F5 WAF with SIEM, SOAR, ticketing, or security orchestration platforms. \n
 * Familiarity with F5 WAF event logging, reporting, and analytics capabilities. \n
 * Experience using Splunk, Microsoft Sentinel, or comparable security-monitoring platforms. \n
 * Familiarity with vulnerability scanners and application-security testing tools. \n
 * Experience supporting penetration tests and validating application-security remediation. \n
 * Knowledge of secure software development practices and common application deployment methods. \n
 * Familiarity with NIST, DoD, FedRAMP, FISMA, or other applicable cybersecurity frameworks and controls. \n
 * Experience working in a federal, DoD, healthcare, or other regulated environment. \n
 * Security+ CE or another applicable DoD 8570/8140 baseline certification. \n