Apply Now

AWS Web Application Firewall (WAF) SME

Remote • Posted 3 hours ago • Updated 3 hours ago

Contract W2

12 Months

No Travel Required

Remote

Depends on Experience

Cloud Destinations LLC

Fitment

Dice Job Match Score™

✨ Finding the perfect fit...

Job Details

Skills

API
Amazon Web Services
Web Application Security
WAF
SIEM
OWASP
Firewall
Cloud Security
CloudWatch

Summary

Position : AWS WAF Subject Matter Expert (SME)

Location: Remote

Duration: 12 Months Contract

Position Overview: We are seeking a highly experienced AWS WAF Subject Matter Expert (SME) to design, implement, and optimize web application security controls in a large-scale AWS environment.

This role will focus on advanced AWS WAF architecture, rule tuning, and enterprise-scale traffic protection strategies, ensuring secure and resilient application delivery. The ideal candidate will bring deep expertise in cloud-native security services, particularly across AWS WAF, Shield, and edge protection services, and will serve as a key technical leader within a large, distributed engineering team.

Responsibilities:

Serve as the AWS WAF SME for enterprise cloud security initiatives
Design, implement, and manage AWS WAF policies and rule sets for web application protection
Develop and maintain custom WAF rules, including rate limiting, IP reputation filtering, and OWASP Top 10 protections
Integrate AWS WAF with:

Application Load Balancers (ALB)
API Gateway
CloudFront distributions

Tune and optimize WAF rules to minimize false positives/negatives
Partner with application teams to ensure secure application onboarding and traffic inspection
Leverage AWS Shield (Standard/Advanced) for DDoS mitigation strategies
Analyze logs using CloudWatch, Kinesis Firehose, and/or SIEM integrations
Provide deep troubleshooting and incident response support for web-layer security events
Establish and enforce best practices for web application security at scale

Qualifications:

7+ years of experience in network and/or cloud security engineering
Strong hands-on experience with AWS WAF (required)
Experience designing and managing WAF policies in enterprise-scale AWS environments
Deep understanding of:

OWASP Top 10 vulnerabilities
Web application attack patterns
Layer 7 traffic inspection

Experience with AWS services, including:

CloudFront
ALB / ELB
API Gateway
AWS Shield

Experience with log analysis, traffic inspection, and security monitoring tools
Ability to tune WAF rules for performance and security effectiveness
Strong troubleshooting skills across application, network, and security layers
Experience working in large, cross-functional engineering teams
Relevant certifications (nice to have):

AWS Certified Security – Specialty
AWS Advanced Networking

Tools and Technologies:

AWS WAF
AWS Shield (Standard / Advanced)
CloudFront
Application Load Balancer (ALB)
API Gateway
CloudWatch
Kinesis Firehose
SIEM / logging platforms

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91097117
Position Id: 8983039
Posted 3 hours ago

Company Info

About Cloud Destinations LLC

One of the leading US-based staffing and IT consulting partner. Experience exceptional service and top-tier talent across industries. Count on us for staffing solutions that cater to the unique demands of the American market.

Our experienced recruiters ensure a seamless fit within your team, accelerating success. But we go beyond staffing and empower employees with fully sponsored certification programs, keeping them ahead. Experience comprehensive benefits including health, wellness coverage, dental insurance, vision insurance, as well as flexible hours, remote work options, and a robust 401K plan to ensure a secure future at the companies we represent.

At Cloud Destinations, we bring industry expertise and a passion for excellence. From Enterprise Cloud Strategy to Managed Infrastructure Services, Digital Transformation, BI & Data Analytics, Security, Data Engineering, and more, we navigate the IT landscape with finesse. Choose us as your trusted partner, witness transformative talent and exceptional service. Let's unlock new possibilities and drive your success in the dynamic world of IT together.

Go to company profile

Contact the job poster

Purusothaman Prabhakaran

Recruiter @ Cloud Destinations LLC

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Cybersecurity Security Engineer

Remote

•

Today

RM Update:Guardicore is highly preferred for this role Note: This is a W2 only role C2C, C2H will not be considered Position Overview:We are seeking an experiencedCybersecurity Security Engineerto support acritical infrastructure and utilities environment, focusing on the deployment, administration, and optimization of enterprise security platforms. This role spans amodern, multi-domain security stackincludingendpoint protection, identity security, data governance, network security, and observa

Easy Apply

Contract

60 - 70

Search all similar jobs