Jobs → Engineering → Web Application Firewall (WAF) Engineer

About the Role We are seeking a Web Application Firewall (WAF) Engineer to join our team in Atlanta, GA. This role involves designing, implementing, and managing security policies to protect web applications and APIs. Key Responsibilities • Design, implement, and manage Imperva WAF security policies to protect internet-facing web applications and APIs • Configure and continuously tune Imperva WAF rules, security policies, and exceptions to mitigate threats while minimizing false positives and business impact • Provide Level 3 support for WAF-related incidents and operational issues, including troubleshooting blocked requests, application access issues, SSL/TLS errors, and connectivity problems • Analyze web traffic, WAF events, and security logs to identify malicious activity, investigate incidents, and recommend appropriate mitigation measures • Configure and manage protections for common web application threats, including SQL injection, cross-site scripting, malicious bots, and distributed denial-of-service (DDoS) attacks • Support application onboarding to Imperva WAF, including DNS configuration, SSL/TLS certificate management, origin connectivity, and validation of security policies • Use infrastructure-as-code tools, particularly Terraform, and Imperva APIs to automate supported configurations and improve operational consistency • Collaborate with application, network, cloud, and security operations teams to align WAF policies with application requirements and security standards • Develop and maintain operational procedures, configuration standards, troubleshooting guides, and change documentation • Monitor emerging web application threats and update Imperva security policies and controls accordingly