Cloud Security Engineer - Cloudflare WAF Specialist
Location : Remote working HOWEVER candidates must already be based in Brussels OR Amsterdam OR Paris OR London (8 days a month on site is mandatory)
Work Type : Permanent
Budget : £90, PA (UK) / €90, PA (EU)
About the Role
We are seeking a highly skilled and security-focused Cloud Security Engineer with deep expertise in Cloudflare WAF to join a high-performing team responsible for protecting critical web infrastructure.
You will play a central role in securing web applications, automating cloud security configurations, and supporting a DevSecOps culture within an Agile environment.
This is an excellent opportunity for someone passionate about cloud security, WAF technologies , and modern automation practices.
Key Responsibilities
- Lead the implementation, configuration, and management of Cloudflare WAF , including custom rule sets, rate limiting, and DDoS protection.
- Monitor and fine-tune web traffic security policies to safeguard against evolving threats.
- Collaborate with application, infrastructure, and DevOps teams to embed security into pipelines and workflows.
- Work with other WAF platforms (eg, Imperva) across on-prem, SaaS, and cloud environments.
- Write scripts and tools (preferably in Python ) to automate security configurations and tasks.
- Apply a deep understanding of network protocols , TLS / mTLS , and authentication mechanisms (eg, OAuth, SAML).
- Support and troubleshoot security issues across Linux-based (RedHat) systems .
- Contribute to a DevSecOps culture , embracing continuous improvement, Agile delivery, and cross-functional collaboration.
Required Skills & Experience
Minimum 3 years of hands-on experience with Cloudflare WAF - policy management, custom rules, and advanced security configurationsStrong grasp of the OSI model , especially Layers 3-7Excellent knowledge of HTTP, HTTPS, SSL, TLS, mTLSFamiliarity with authentication protocols such as SAML , OAuth , or similarScripting skills in Python (other programming languages are a plus)Solid understanding of PKI and certificate managementExperience with Linux / Unix systems , ideally RedHatSolid networking knowledge (Layer 3 and 4)Desirable Skills
Experience with Imperva WAF / WAAP - on-prem, SaaS, or cloudAutomation and Infrastructure-as-Code experience using Terraform or AnsibleFamiliarity with DevOps , Agile , and Scrum methodologiesHands-on experience with reverse proxies such as NGINX or Apache HTTPDSecurity certifications such as CISSP , OSCP , or similarPassionate about a specific technical area (cloud, containers, security, etc.)Soft Skills & Traits
Collaborative team player with a proactive attitudeStrong problem-solving and critical thinking capabilitiesCustomer-focused, able to understand the broader business contextOpen-minded and eager to learn and evolveAble to communicate complex ideas clearly and assess consequences of decisions