• Lead the onboarding of web applications into a CDN, ensuring proper security policy integration and optimized delivery • Manage WAFs deployed on-premises, in the cloud, or in hybrid environments, including those co-managed with external service providers • Configure, maintain, and tune WAF rules to protect against web application threats, including OWASP Top Ten risks • Set up and execute DAST scans on web applications to identify vulnerabilities in runtime environments, validate WAF coverage, and provide actionable remediation guidance • Collaborate with development, infrastructure, and SOC/IR teams to ensure findings are triaged, addressed, and documented • Monitor application traffic and threat activity, leveraging automation and analytics to detect and respond to anomalies • Perform continuous testing and tuning of WAF policies based on threat intelligence, logs, and scan results • Contribute to incident response efforts related to application-layer attacks and vulnerabilities • Develop and maintain documentation related to WAF policies, scan results, application mappings, and remediation plans