Chi tiết công việc [DISION TECH] Cloudflare WAF / Network Security Engineer tại DISION Tech
Role overview
We are seeking an experienced security engineer with mandatory hands-on experience implementing, configuring, and operating Cloudflare Web Application Firewall (WAF) in production environments.
This role focuses on security platform implementation, application migration, WAF policy configuration, troubleshooting, and operational readiness.
This is not a frontend, backend, or full-stack software-development position. General software-development experience, application-level security knowledge, or basic use of Cloudflare for DNS or CDN purposes alone does not meet the requirements.
Key responsibilities
- Support the technical implementation and configuration of the Cloudflare platform.
- Assist with migrating applications and services from an existing platform to Cloudflare.
- Configure, test, tune, and troubleshoot Cloudflare WAF policies.
- Investigate blocked requests and false positives, and implement appropriate policy adjustments without unnecessarily weakening protection.
- Provide engineering expertise for platform configuration, security policy implementation, and service optimisation.
- Collaborate with internal network security teams, application owners, and external technical specialists during deployment activities.
- Support application onboarding, validation, testing, and transition into production operations.
- Troubleshoot issues affecting application access, security policies, and connectivity between Cloudflare and application origins.
- Advise on secure platform design, WAF policies, API protection, and other relevant Cloudflare security capabilities.
- Prepare technical documentation, operational procedures, and knowledge-transfer materials.
- Provide technical support during the initial operational phase.
- Identify implementation risks, propose mitigation measures, and support the successful delivery of project objectives.
Essential requirements
- Demonstrable hands-on experience implementing, configuring, and supporting Cloudflare WAF in production environments.
- Practical experience configuring and tuning WAF policies, investigating security events, and resolving false positives.
- Experience onboarding applications onto Cloudflare or migrating applications from an existing reverse proxy, WAF, or application-delivery platform.
- Strong understanding of DNS, HTTP/HTTPS, SSL/TLS, reverse proxies, and origin connectivity.
- Understanding of web application security, API protection, and secure platform design.
- Ability to troubleshoot application traffic and security issues across the Cloudflare platform and the underlying application infrastructure.
- Experience with technical validation, production changes, operational handover, and technical documentation.
- Ability to work independently and collaborate effectively with network security teams and application stakeholders.
- English proficiency, both spoken and written, is essential. Candidates must be able to participate actively in technical meetings, explain troubleshooting findings, and prepare clear technical documentation in English.
Preferred experience
- Enterprise-scale Cloudflare implementation or migration projects.
- Migration from another WAF or reverse-proxy platform to Cloudflare.
- Cloudflare API protection and additional application security capabilities.
- Infrastructure or network security engineering in production environments.
- Operational readiness, technical handovers, and knowledge-transfer sessions.
- Automation of platform configuration or operational tasks.
Application requirements
Please include the following with your application:
- A brief description of a production Cloudflare WAF implementation, migration, or operational engagement you personally worked on.
- Your specific responsibilities and the Cloudflare features you configured.
- One example of a WAF policy issue or false positive you investigated and resolved.
- Your experience communicating and preparing technical documentation in English.
Applications must demonstrate relevant Cloudflare WAF experience. Experience limited to software development, academic security projects, SOC monitoring, or basic Cloudflare DNS/CDN usage is not sufficient for this position.
