Description
The Cloud RTB WAF Engineer will work on the ECB Programme to deploy WAF solutions on client domains and internal web applications, meeting the Bank's regulatory requirements. The role involves working with Global Business Teams, advising on False Positive analysis, and maintaining relationships with Vendor teams. The engineer will also be responsible for servicing WAF requests, managing service issues, and working closely with Change Teams and stakeholders.
Responsibilities
• Work on the ECB Programme to deploy WAF solutions on client domains and internal web applications
• Service existing and new requests for WAF, dealing with service issues and managing multiple requests at once
• Maintain communications/relationships with Vendor teams and HSBC Cloud Platform Leads
• Provide DevSecOps support for maintaining automation pipeline and delivery works
• Identify additional automation use cases for RTB to better streamline processes
Requirements
• Extensive experience with Web Application Security log analysis and a Cyber SOC/CSIRT work background
• Solid experience with multiple WAF solutions for edge, cloud, and on premises
• Strong experience with cloud services and their WAF controls, ideally including GCP
• Strong understanding of Web Application security attack methods and mitigations
• Proficiency in WAF tuning and configuration, coupled with a strong foundation in web security principles and practices