Summary:
The Azure Cloud WAF Engineer plays a pivotal role within the ECB Programme, driving the deployment and management of Web Application Firewall (WAF) solutions across all client-facing and internal web applications to meet stringent regulatory requirements. Operating as part of the Run the Bank team, this role leverages Agile methodologies to collaborate closely with Global Business Teams, ensuring effective implementation of custom WAF rules, exception handling, and accurate false positive analysis. The engineer will lead baseline policy updates, maintain strategic relationships with vendor partners and HSBC Cloud Platform Leads, and support seamless service delivery by managing multiple requests concurrently. Responsibilities include resolving service issues, coordinating with Change Teams, and advancing DevSecOps practices through automation pipeline maintenance and process optimization. This role demands robust technical expertise in WAF and cloud security, along with proactive stakeholder engagement to identify risks, report status,
and escalate issues when necessary—ensuring a secure, compliant, and resilient web application environment.
Responsibilities:
Deploy and manage WAF solutions across internet-facing and internal web applications in alignment with regulatory and security standards.
Collaborate with Global Business Teams to develop, test, and implement custom WAF rules and exceptions.
Conduct thorough analysis of false positives and support baseline policy tuning for optimal security and performance.
Serve as a key liaison between internal teams, vendors, and HSBC Cloud Platform Leads to ensure consistent WAF governance and operational excellence.
Manage and prioritize multiple WAF service requests, coordinating with Change Teams and stakeholders for timely resolution.
Provide DevSecOps support by maintaining automation pipelines and identifying opportunities for process automation.
Proac