Web Application Firewall (WAF) Administrator

Quick Facts

• Role: Web Application Firewall (WAF) Administrator

• Focus: WAF administration, tuning, telemetry/log analysis, incident response, and automation for web & API security

Description

You will manage and evolve the WAF layer for web and API services, including policy design, tuning, exceptions, and false-positive hygiene. You’ll analyze operational telemetry and logs to detect attack patterns, correlate them with application traffic, and propose improvements, while supporting incident response. You will collaborate with development and platform/infra teams on releases and rollout/rollback, and progressively automate repeatable WAF administration tasks.

Responsibilities

• Administer and improve WAF policies for web and API services (policy design, tuning, exceptions, false-positive cleanup)

• Analyze telemetry and logs to recognize attack patterns and correlate with application operations

• Work with development and platform/infra teams during release and rollout/rollback and for performance-related changes

• Automate repeatable tasks (templates, scripts, Git-driven changes)

• Participate in application security incident response

Requirements

• Hands-on experience with WAF (any platform)

• Knowledge of network protocols and web application fundamentals (DNS, HTTP/HTTPS, TLS) and familiarity with OWASP Top 10

• Ability to read traffic details (headers, cookies, user-agents, bot patterns) and explain the reasoning

• Basic scripting and automation experience (Bash/PowerShell/Python/Ansible) with an automation mindset

• Linux/Windows administration experience, plus awareness of PKI/TLS, reverse proxy, and L7 load balancing

• Teamwork, openness to learning, and ability to take ownership and complete changes

• English proficiency (B2+) to read and work with technical documentation

Benefits

• Sponsored intensive development with access to WAF labs (F5/Cloudflare) and mentoring

• Certification support

• Real influence on architecture and configuration decisions

• Indefinite contract

• Meal allowance (180 CZK/day), 5 weeks of vacation, 3 sick days/year

• Home office and flexible working hours

• Training and education support

• Pension contribution and Cafeteria benefits

• Child education support (Via Beroun), on-site gym

• Telemedicine, psychological care, and legal advice