IT 安全 - 资深

Role: IT Security -Senior
Job Ref Id: JD-1182
Competence level: Not stated
Start date: 2026-10-01
End date: 2026-12-31
Extension option: Yes
Scope: 100%
Location: Remote
Remote work: 100%
Language: English
Application deadline: 2026-09-25
Number of consultants: 3
Security clearance: No
About the assignment
Our client is seeking to temporarily strengthen their support and operations team for the Cloudflare WAF service during a peak period. The assignment will involve managing incidents, change requests, and operational tasks related to IT security.
Responsibilities

• Manage and resolve Cloudflare WAF-related incidents, service requests, and change requests through ServiceNow.

• Handle daily operational tickets within defined SLA targets.

• Perform root cause analysis (RCA) for security incidents and application access issues.

• Coordinate with Application, Infrastructure, Network, and Security teams for issue resolution.

• Participate in major incident calls and provide technical support during outages.

• Monitor Cloudflare security events, alerts, and dashboards.

• Investigate and troubleshoot blocked traffic, false positives, and application functionality issues.

• Fine-tune Cloudflare Managed Rules, Custom Rules, Rate Limiting Rules, and Bot Protection policies.

• Review WAF logs and security analytics to identify threats and recommend improvements.

• Support onboarding and offboarding of applications to Cloudflare.

• Implement approved changes through ServiceNow change management processes.

• Deploy and validate WAF policy updates, ACL changes, SSL certificate modifications, and DNS updates.

• Perform pre-production and post-implementation validation.

• Support planned maintenance and production cutovers.

• Troubleshoot application connectivity, DNS resolution, SSL/TLS certificate, and Cloudflare Tunnel issues.

• Work with application teams to identify and resolve traffic routing and security policy issues.

• Analyze HTTP/S traffic, network traces, and Cloudflare logs for problem resolution.

• Create and manage WAF rules, firewall policies, IP lists, rate limits, and bot mitigation controls.

• Support DDoS protection configurations and attack mitigation activities.

• Implement security baselines and approved exception requests.

• Ensure Cloudflare configurations comply with organizational security standards.

• Monitor service health and security posture of protected applications.

• Prepare weekly and monthly operational reports.

• Track onboarding status, incidents, change success rates, and attack mitigation metrics.

• Maintain operational dashboards and KPI reporting.

• Maintain operational runbooks, SOPs, and knowledge base articles.

• Update architecture diagrams and support documentation.

• Participate in security reviews, audits, and compliance activities.

• Support risk assessments and security exception processes.

Requirements

Mandatory

• Strong knowledge in Cloudflare WAF

• Hands-on experience with ServiceNow Incident, Request, Problem, and Change Management.

• Experience supporting Cloudflare WAF in a 24x7 enterprise environment.

• Strong troubleshooting skills for DNS, SSL/TLS, HTTP/S, Load Balancing, and Application Security.

• Familiarity with Cloudflare WAF, DDoS, Bot Management, Zero Trust, and Cloudflare Tunnels.

• Experience working with Azure, AWS, on prem, and enterprise application environments.

Originally posted on Himalayas