Contract: WAF Tuning
Start Date: ASAP
Duration: 3 months (extendable)
Location: Hybrid (On site in Sheffield/Birmingham or Edinburgh 3 days a week)
Rate: Negotiable depending on experience (deemed inside IR35)
Reference: 19542

You will either be a F5 WAF tuning specialists (OWASP experience required OR Cloud-native WAF engineers (minimum 2 of 3 CSPs) (AWS & GCP as preference)/OR Generic WAF tuning resource (cross-skill utility)

Immediate contract for experienced WAF engineers to help augment the internal Efficacy and Security Engineering teams with hands-on consultancy focused on WAF tuning and efficacy testing across F5 and cloud-native WAFs (covering at least two out of three major CSPs: AWS, Azure, GCP). A focus on tuning rules, analysing data, reducing false positives, and validating control efficacy in production-like conditions.

Scope Includes:

• Hands-on tuning experience with F5.
• Custom rule creation, OWASP rule tuning (especially for F5), false positive reduction.
• Log analysis and data-driven tuning based on real traffic.
• Support for cloud-native WAF tuning (all three Cloud providers) -not deployment or infra setup.
• Efficacy testing in partnership with the internal team - recommend adjustments based on findings.
• Well-rounded profiles with real-world exposure -not theoretical or solely vendor-trained.

Key Expectations:

• Prior experience in professional services engagements or consulting.
• Familiarity with at least one cloud provider in real operational environments.
• Strong soft skills - happy to learn above and beyond the role - initiative-taking, collaborative, and able to communicate tuning rationale.

Background check completion prior to contract commencement will be required

Must be eligible to work in UK for duration of the project

Networking People (UK) is acting as an Employment Business in relation to this vacancy.