Cybersecurity Engineer - WAF / WAAP Specialist

• Permanent contract.
• Remote work.
• Vacation: 24 working days.
• Telework expense compensation (proportional based on telework days).
• Flexible compensation: up to 500€/month in payroll.
• Social Benefits (Cobee): Annual allowance of 1,200 € for food vouchers, transportation, medical insurance, daycare, or training.
• Once the annual leave allowance has been used, the possibility of continuing to enjoy benefits through flexible remuneration.
• MyLearningHub: Training platform with a wide catalog of content.
• Wellhub: Access to sports and wellness activities.
• Employee Assistance Program (Lyra): Confidential professional support service.
• The Genuine Travel: Exclusive travel benefits.
• Discount portal with advantages across a broad network of stores and services.

We are looking for a Cybersecurity Engineer specializing in WAF and WAAP technologies to participate in the administration, operation, and evolution of web application protection platforms in critical environments. The position combines security infrastructure management, rule and policy optimization, continuous monitoring, and improvement of the cybersecurity posture of corporate services.

• Participate in challenging projects with cutting-edge technologies.
• You will have autonomy to propose solutions and lead technically.

• Administration, operation, and maintenance of WAF/WAAP platforms.
• Installation, configuration, updating, and evolution of web application protection solutions.
• Management and optimization of security policies, signatures, rules, and exceptions.
• Analysis, diagnosis, and resolution of incidents related to application protection.
• Tuning and fine-tuning of rules to minimize false positives and ensure service continuity.
• Proactive monitoring of security events and services.
• Management of TLS/SSL certificates and support for secure application publishing.
• Implementation of hardening measures and continuous improvement of the security posture.
• Integration with SIEM tools, monitoring, and automation.
• Preparation and maintenance of documentation and operational procedures.
• Optimization of infrastructure performance, capacity, and availability.
• Participation in scheduled maintenance and update tasks when required.

• University degree in Computer Engineering, Telecommunications Engineering, or equivalent.
• Academic level equivalent to MECES 2.
• Minimum of 4 years of experience in infrastructure, cybersecurity, or technology platform administration.
• Demonstrable experience in the administration and operation of WAF/WAAP solutions.
• Solid knowledge of HTTP/HTTPS protocols, digital certificates, TLS/SSL, and web application security.
• Experience in monitoring, incident management, and operations of critical services.
• Analytical skills and a problem-solving orientation.
• Proactivity, commitment to continuous improvement, and strong teamwork skills.

Nice to have

• Experience with F5 NGINX App Protect.
• Knowledge of other WAF platforms such as Imperva, Cloudflare, Akamai, or Barracuda.
• Experience with integration into SIEM platforms and automation tools.
• Experience in high-availability environments and secure architectures.
• English B2 or higher.