Senior AWS Cloud Security & DevSecOps Engineer (WAF Specialist)

About the role

Experian is seeking a Senior AWS Cloud Security and DevSecOps Engineer to lead the design, implementation, and tuning of Layer‑7 inspection and WAF/API protection across a high‑traffic environment. You will shape security policy, develop safe mitigation strategies, and collaborate with SRE, TOC, and SecOps teams to ensure robust telemetry and incident response.

Key responsibilities

• Design, deploy, and manage AWS L7 inspection tools including WAF, firewalls, IPS, and proxy patterns with safe roll‑outs.
• Own WAF and API security tuning, false‑positive reduction, and emergency virtual‑patching.
• Integrate AI/GenAI security controls using least‑privilege gateways, segmentation, logging, and rate limiting.
• Improve edge performance through CDN, caching, compression, and edge‑to‑origin troubleshooting.
• Develop automation scripts in Python and Tines to enforce security guardrails and reduce operational toil.
• Partner with SRE/TOC/SecOps to enhance incident response telemetry, runbooks, and MTTR.
• Maintain cloud security posture awareness across CSPM and SASE/SSE solutions in AWS.

Required profile

• 3+ years of DevSecOps experience with strong automation skills (Python, Tines).
• Deep hands‑on experience with AWS networking at production scale, including segmentation, traffic flows, and safe change management.
• Proven expertise in Zero Trust network design and policy‑driven segmentation.
• Solid background in web‑application and API security with availability‑safe controls.
• Knowledge of AI security, GenAI risks, and network‑layer mitigations.
• Excellent documentation, cross‑team influence, and incident‑response discipline.

Required skills

• AWS (VPC, WAF, networking)
• Python
• Tines
• Zero Trust architecture
• Web Application Firewall (WAF) and API security
• Cloud Security Posture Management (CSPM)
• SASE / SSE
• AI security and GenAI risk mitigation
• CDN, caching, compression