Security Engineer - Application Security

About the Job

Security for Applications (SFA) is an organizational cluster of global security capabilities designed to safeguard software applications from potential threats. SFA is part of the wider Security Services group and core Information Security Operations pillar of Allianz Technology

We are seeking a skilled and proactive Web Application Firewall (WAF) Specialist to join our cloud WAF team. The ideal candidate will play a crucial role in safeguarding our web applications and APIs against evolving cyber threats. You will be responsible for designing, implementing, and optimizing WAF rules, responding to security incidents, and working closely with DevOps and security teams to ensure robust protection for our web properties.

What you do

• Design and implement WAF rules to mitigate vulnerabilities and protect against OWASP Top 10 threats (e.g., XSS, SQLi, etc.).
• Configure and optimize WAF policies, including positive and negative security models. Monitor and adjust rate-limiting, IP allow / deny lists, and bot protection.
• Respond to security incidents, analyze logs, and provide real-time WAF tuning to mitigate threats
• Conduct root cause analysis (RCA) for WAF-related incidents and recommend improvements.
• Use WAF tools and dashboards to monitor real-time threats and trends. Generate reports and provide insights to stakeholders on WAF effectiveness and security posture.
• Collaborate with DevOps, SecOps, and application development teams to ensure seamless integration of WAF into CI / CD pipelines.
• Regularly update WAF configurations to address new vulnerabilities, emerging threats, and application changes.
• Conduct performance analysis and minimize latency impact while maintaining security.
• Document WAF configurations, incident handling procedures, and best practices.
• Train internal teams on Akamai security solutions and WAF configurations.

What you bring

What we offer

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction.

In short : We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at : statement

Allianz Technology is proud to be an equal opportunity employer that embraces diversity and commits itself to creating an inclusive work environment for all.

We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.

You. IT.

To Recruitment Agencies :

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.

61260 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido #J-18808-Ljbffr