WAF Security Engineer

Lloyds Banking Group

WAF Security Engineer protecting Lloyds Banking Group’s customer-facing banking services. Designing secure, automated Layer 7 platforms across cloud, data-centre and edge environments.

Posted 9/3/2026full-timeManchester • 🇬🇧 United KingdomMid-LevelSenior💰 £48,987 - £55,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Web Application Firewall (WAF) security controls, including the development and tuning of WAF rules and policies. Proficient in Infrastructure as Code, CI/CD pipelines, and automation to enhance security and incident response capabilities.

Highest-signal resume keywords

Web Application Firewall (WAF) TechnologiesInfrastructure as Code (IaC)Python ScriptingCI/CD PipelinesApplication Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

WAF Rule DevelopmentIncident DiagnosisNetwork FundamentalsAPI SecurityBot ProtectionLayer 7 DDoS MitigationAutomation SkillsCloud-Based Data Warehouse TechnologiesTechnical DocumentationMonitoring and Alerting

Soft Skills

Problem-SolvingInfluencing Engineering DecisionsCollaboration

Tools & Technologies

TerraformCloud TechnologiesSecurity Engineering ToolsMonitoring ToolsTelemetry Systems

Certifications & Qualifications

Professional-Level Cloud CertificationsSecurity Engineering Accreditations

Industry Keywords

Edge SecurityOn-Premises SecurityCloud-Native SecuritySecure-By-Design PatternsTechnical Debt Reduction

Tech Stack

Tools & technologies

CloudDNSPythonTerraform

About the role

Key responsibilities & impact

Design, implement and continuously optimise Web Application Firewall security controls
Develop and tune WAF rules and policies to protect against emerging threats while minimising false positives
Engineer new WAF capabilities using Infrastructure as Code, CI/CD pipelines and policy-as-code
Contribute to platform modernisation, refactoring, automation and technical-debt reduction
Improve monitoring, alerting and telemetry to strengthen reliability and incident response
Diagnose and resolve major incidents with Security Engineering, Network and Cloud teams
Embed secure-by-design patterns and guardrails for platform consumers
Produce engineering documentation, standards, patterns, platform guidance and runbooks
Participate in the on-call rota for critical services
Influence technical direction and engineering standards across teams and platforms

Requirements

What you’ll need

Hands-on experience of edge, on-premises or cloud-native WAF technologies
Solid understanding of networking and web fundamentals, including HTTP/S, DNS, TLS and platform security concepts
Experience in Application Security, API Security, Bot Protection, and/or Layer 7 DDoS mitigation
Strong automation and scripting skills; Python preferred
Practical experience with Infrastructure-as-Code tools; Terraform preferred
Experience with modern CI/CD pipelines
Ability to contribute to complex technical investigations, diagnose issues under pressure and develop robust solutions
Ability to influence engineering decisions and contribute to technical direction
Professional-level cloud certifications and/or recognised security or network engineering accreditations would be advantageous
Demonstrable experience with cloud-based data warehouse technologies would be advantageous
Interest in or experience developing AI solutions to augment security solutions would be advantageous
Full-time availability for 35 hours per week

Benefits

Comp & perks

Additional compensation for participating in the on-call rota
Hybrid working and flexible working options
Job share option
Workplace adjustments and flexibility in office attendance, location and working patterns
Pension contribution of up to 15%
Annual bonus award, subject to Group performance
Share schemes including free shares
Lifestyle benefits such as discounted shopping
28 days’ holiday, with bank holidays on top
Wellbeing initiatives
Generous parental leave policies
Professional learning, development and career growth opportunities