F5 WAF Engineer Lead

Required Qualifications
5+ years of experience in web application firewall engineering, with strong hands-on expertise in F5 Distributed Cloud (XC) WAAP.
Demonstrated experience designing and implementing custom, per-application WAF policies (not just baseline/default rule sets).
Experience conducting web application vulnerability assessment and remediation.
Strong understanding of OWASP Top 10 and emerging web application threats.
Experience leveraging AI/automation tooling to scale security operations (policy generation, evaluation, or triage).
Ability to operate as both a strategic lead (defining direction, engaging client stakeholders) and a hands-on implementer.
Experience with F5 Silverline and/or BIG-IP ASM/Advanced WAF (prior-generation context).
Familiarity with cloud-hosted application architectures.
Excellent communication skills — able to present strategy and status to client security leadership.
Preferred Qualifications
Experience integrating SAST/SCA/DAST/pen-test tooling into WAF policy workflows.
F5 Certified Technology Specialist (CTS) or equivalent.
Experience with regulated environments (PCI, SOX, HIPAA).
Knowledge of Zero Trust and API security frameworks.
Familiarity with automation/scripting (Python, REST APIs, Terraform) for policy-as-code workflows.
Prior experience leading or scaling a security engineering practice/team.
Technical Skills
F5 Technologies: F5 Distributed Cloud (XC) WAAP, F5 Silverline, BIG-IP ASM/Advanced WAF (legacy context)
Security: Web Application Firewall (WAF) policy design, OWASP Top 10, AI-assisted security tooling, application security, API security, vulnerability assessment, threat mitigation

Work arrangement
Yes