ZipRecruiter

Log In

2

Remote Waf Jobs (NOW HIRING)

NextDeavor Inc.

WAF Adversarial Engineer

Seattle, WA · On-site +1

$56.34 - $70.42/hr

This role is hybrid/remote with Seattle preferred and open to remote candidates. Here's How You'll Make an Impact on the Team * Run adversarial test campaigns against the client's WAF stack after ...

TerraForm Power

Engineer/Senior Engineer, Firewall

$117K - $160K/yr

They are seeking a Senior Engineer for their Remote Operations Centre to design, implement, and ... Check Point). • Working knowledge of WAF technologies and web security (OWASP Top 10, TLS, mTLS ...

IT America Inc

Cloud Armor Architect with GCP

Columbus, OH · Remote

$66.50 - $84.75/hr

Remote Duration: Long term contract Key Responsibilities: * Design and implement secure cloud ... Develop and enforce security policies, access controls, and WAF (Web Application Firewall ...

Lightology LLC

Web Application Firewall Engineer

$100K - $120K/yr

Remote Job Type: Full-Time Pay range : $100,000 - $120,000 Salary Lightology is seeking an ... Configure and maintain Web Application Firewalls (WAF) and application security controls ...

Lorven Technologies

Network Security Engineer

$107K - $146K/yr

Remote Duration: Long Term Contract * Minimum 5 years experience working in a technical support ... WAF), load balancing, and other related solutions for clients across various industries.

next page

Showing results 1-20

All JobsWaf JobsRemote Waf Jobs

Remote Waf information

What is a Remote WAF?

A Remote WAF, or Web Application Firewall, is a security solution that protects web applications from common cyber threats such as SQL injection, cross-site scripting (XSS), and other vulnerabilities. Unlike traditional WAFs that are installed directly on the application server, a Remote WAF is hosted offsite, often in the cloud, and works by filtering and monitoring traffic before it reaches the application. This allows businesses to secure their web applications without managing the infrastructure themselves. Remote WAFs offer flexibility, scalability, and simplified management, making them a popular choice for organizations with distributed or cloud-based applications.

How does a Remote WAF (Web Application Firewall) Engineer typically collaborate with other IT teams to maintain application security?

A Remote WAF Engineer works closely with development, operations, and security teams to ensure that web applications remain protected against threats. This often involves regular communication via virtual meetings, ticketing systems, and documentation platforms to discuss vulnerabilities, review logs, and coordinate on incident responses. The role may also include providing recommendations for secure coding practices and assisting with security patch deployments. Effective collaboration ensures timely identification and mitigation of potential risks across the application lifecycle.

What is the difference between Remote Waf vs Remote Web Application Firewall Specialist?

AspectRemote WafRemote Web Application Firewall Specialist
CertificationsTypically includes security certifications like CEH, CISSPOften requires certifications like CEH, OSCP, or vendor-specific WAF certifications
Work EnvironmentRemote, cybersecurity-focused teamsRemote, security and network-focused roles
Industry UsageUsed across various industries for web securitySpecialized role within cybersecurity teams
Job FocusImplementing and managing Web Application FirewallsConfiguring, tuning, and monitoring WAFs for security

Remote Waf refers broadly to roles involving Web Application Firewalls, while Remote Web Application Firewall Specialist is a specialized position focusing on configuring and managing WAFs. Both roles require cybersecurity knowledge, but the specialist role emphasizes hands-on management and tuning of WAF solutions.

What are the key skills and qualifications needed to thrive as a Remote Web Application Firewall (WAF) Engineer, and why are they important?

To thrive as a Remote WAF Engineer, you need a strong background in cybersecurity, network protocols, and web application security, typically supported by a degree in computer science or related certifications like CEH or CISSP. Familiarity with WAF platforms (such as AWS WAF, Imperva, or Cloudflare), scripting languages, and security monitoring tools is essential. Standout soft skills include analytical thinking, problem-solving, and effective remote communication for collaborating with distributed teams. These skills are crucial to proactively detect, mitigate, and communicate web security threats, ensuring robust protection for critical online assets.
More about Remote Waf jobs
What cities are hiring for Remote Waf jobs? Cities with the most Remote Waf job openings:
What are the most commonly searched types of Waf jobs? The most popular types of Waf jobs are:
What states have the most Remote Waf jobs? States with the most job openings for Remote Waf jobs include:
What job categories do people searching Remote Waf jobs look for? The top searched job categories for Remote Waf jobs are:
Remote Waf jobs near you
Infographic showing various Remote Waf job openings in the United States as of July 2026, with employment types broken down into 72% Full Time, 8% Part Time, and 20% Contract. Highlights an 42% Physical, 3% Hybrid, and 55% Remote job distribution.
WAF Adversarial Engineer

WAF Adversarial Engineer

NextDeavor Inc.

Seattle, WA • On-site, Remote

$56.34 - $70.42/hr

Contractor

Medical, Dental, Vision, Retirement

Posted 17 days ago

Job description

WAF Adversarial Engineer
Full-time
Seattle, WA, US
 

You’ll be joining Adobe on a contract opportunity, employed through NextDeavor

 
Benefits You'll Love

NextDeavor offers health, vision and dental benefits for contract employees Paid sick leave eligibility is contingent on state of residence Optional 401k Plan (excludes employer match) Opportunity to get your foot in the door at a well-established corporation, with potential for extended or permanent full-time employment

Become a Key Player as a WAF Adversarial Engineer

You will validate and harden the client's web application firewall (WAF) program by running continuous adversarial testing and translating offensive findings into actionable rule candidates. Your work will influence edge security, incident response, and rule-deployment cadence across the security and engineering teams. This role is hybrid/remote with Seattle preferred and open to remote candidates.

Here's How You'll Make an Impact on the Team
  • Run adversarial test campaigns against the client's WAF stack after each rule update cycle, targeting encoding evasion, HTTP parsing differentials, request smuggling, and other edge-layer weaknesses.
  • Build and maintain a versioned WAF bypass library organized by vulnerability class (e.g., SQLi, XSS, SSRF, path traversal, SSTI) and validate against staging and production WAF configurations.
  • Conduct adversarial testing of API endpoints behind the WAF (business logic abuse, BOLA/BFLA, mass assignment, parameter manipulation) and document which attack classes the WAF can and cannot reliably cover.
  • Triage complex false positives by reproducing ambiguous traffic from the attacker side and recommending targeted rule adjustments.
  • Produce concise validation reports that deliver a reproducer plus a rule recommendation suitable for refinement and deployment.
  • Provide adversarial perspective during active edge incidents, identifying likely attacker behavior, blind spots, and next probable moves.
  • Integrate continuous validation into the team's rule update cadence rather than running standalone penetration tests.
Here's What You'll Need to Be Successful in This Role
  • Demonstrated WAF bypass experience against at least two commercial WAF platforms (e.g., Akamai, AWS WAF, Fastly, Cloudflare).
  • Deep working knowledge of HTTP protocol edge cases affecting WAF inspection: request smuggling primitives, chunked transfer encoding abuse, multipart boundary manipulation, Unicode normalization differentials, and header injection patterns.
  • Proven web application penetration testing track record with WAF-specific scope; tool-running alone does not qualify.
  • Certifications or demonstrated outputs such as OSCP, BSCP, OSWE, or a portfolio of disclosed bypasses, conference talks, or prior validation engagements.
  • Strong scripting skills in Python or Go for building test harnesses, payload generators, and replay tooling.
  • Comfortable working in CI/CD pipelines and cloud environments (AWS or Azure) and integrating with existing infrastructure.
  • Bachelor's degree in Computer Science, Computer Engineering, Information Security, or a related technical field, or equivalent demonstrated experience.
Here's What Else Might Help You Out
  • Deep API-specific attack knowledge: GraphQL injection, BOLA/BFLA, mass assignment.
  • Familiarity with Akamai internals (KRS / ASE rule engine, custom Lua / EdgeWorkers).
  • Experience with bot evasion techniques at the behavioral layer (headless browser fingerprinting bypass, behavioral mimicry).
  • Familiarity with edge-layer LLM/GenAI guardrails and prompt injection mitigation at the WAF tier.
  • Public security research, CVE disclosures, or conference talks demonstrating original bypass work.
Pay Range

$56.34 - $70.42/hour

Ready to Make Your Mark?

This role may fill quickly. Submit your resume to be considered.

Apply with Pioneers here

Apply