AWS WAF SME

Role : AWS WAF SME

Location : Remote

Duration : 12 Months

This role will focus on advanced AWS WAF architecture, rule tuning, and enterprise-scale traffic protection strategies , ensuring secure and resilient application delivery. The ideal candidate will bring deep expertise in cloud-native security services , particularly across AWS WAF, Shield, and edge protection services , and will serve as a key technical leader within a large, distributed engineering team. Responsibilities:

Serve as the AWS WAF SME for enterprise cloud security initiatives

Design, implement, and manage AWS WAF policies and rule sets for web application protection

Develop and maintain custom WAF rules , including rate limiting, IP reputation filtering, and OWASP Top 10 protections

Integrate AWS WAF with:

Application Load Balancers (ALB)

API Gateway

CloudFront distributions

Tune and optimize WAF rules to minimize false positives/negatives

Partner with application teams to ensure secure application onboarding and traffic inspection

Leverage AWS Shield (Standard/Advanced) for DDoS mitigation strategies

Analyze logs using CloudWatch, Kinesis Firehose, and/or SIEM integrations

Provide deep troubleshooting and incident response support for web-layer security events

Establish and enforce best practices for web application security at scale Qualifications:

7+ years of experience in network and/or cloud security engineering

Strong hands-on experience with AWS WAF (required)

Experience designing and managing WAF policies in enterprise-scale AWS environments

Deep understanding of:

OWASP Top 10 vulnerabilities

Web application attack patterns

Layer 7 traffic inspection

Experience with AWS services , including:

CloudFront

ALB / ELB

API Gateway

AWS Shield

Experience with log analysis, traffic inspection, and security monitoring tools

Ability to tune WAF rules for performance and security effectiveness

Strong troubleshooting skills across application, network, and security layers

Experience working in large, cross-functional engineering teams

Relevant certifications (nice to have):

AWS Certified Security – Specialty

AWS Advanced Networking Tools and Technologies:

AWS WAF

AWS Shield (Standard / Advanced)

CloudFront

Application Load Balancer (ALB)

API Gateway

CloudWatch

Kinesis Firehose