IT Security -Senior

Role: IT Security -Senior Job Ref Id: JD-1182 Competence level: Not stated Start date: 2026-10-01 End date: 2026-12-31 Extension option: Yes Scope: 100% Location: Remote Remote work: 100% Language: English Application deadline: 2026-09-25 Number of consultants: 3 Security clearance: No About the assignment Our client is seeking to temporarily strengthen their support and operations team for the Cloudflare WAF service during a peak period. The assignment will involve managing incidents, change requests, and operational tasks related to IT security. Responsibilities - Manage and resolve Cloudflare WAF-related incidents, service requests, and change requests through ServiceNow. - Handle daily operational tickets within defined SLA targets. - Perform root cause analysis (RCA) for security incidents and application access issues. - Coordinate with Application, Infrastructure, Network, and Security teams for issue resolution. - Participate in major incident calls and provide technical support during outages. - Monitor Cloudflare security events, alerts, and dashboards. - Investigate and troubleshoot blocked traffic, false positives, and application functionality issues. - Fine-tune Cloudflare Managed Rules, Custom Rules, Rate Limiting Rules, and Bot Protection policies. - Review WAF logs and security analytics to identify threats and recommend improvements. - Support onboarding and offboarding of applications to Cloudflare. - Implement approved changes through ServiceNow change management processes. - Deploy and validate WAF policy updates, ACL changes, SSL certificate modifications, and DNS updates. - Perform pre-production and post-implementation validation. - Support planned maintenance and production cutovers. - Troubleshoot application connectivity, DNS resolution, SSL/TLS certificate, and Cloudflare Tunnel issues. - Work with application teams to identify and resolve traffic routing and security policy issues. - Analyze HTTP/S traffic, network traces, and Cloudflare logs for problem resolution. - Create and manage WAF rules, firewall policies, IP lists, rate limits, and bot mitigation controls. - Support DDoS protection configurations and attack mitigation activities. - Implement security baselines and approved exception requests. - Ensure Cloudflare configurations comply with organizational security standards. - Monitor service health and security posture of protected applications. - Prepare weekly and monthly operational reports. - Track onboarding status, incidents, change success rates, and attack mitigation metrics. - Maintain operational dashboards and KPI reporting. - Maintain operational runbooks, SOPs, and knowledge base articles. - Update architecture diagrams and support documentation. - Participate in security reviews, audits, and compliance activities. - Support risk assessments and security exception processes. Requirements Mandatory - Strong knowledge in Cloudflare WAF - Hands-on experience with ServiceNow Incident, Request, Problem, and Change Management. - Experience supporting Cloudflare WAF in a 24x7 enterprise environment. - Strong troubleshooting skills for DNS, SSL/TLS, HTTP/S, Load Balancing, and Application Security. - Familiarity with Cloudflare WAF, DDoS, Bot Management, Zero Trust, and Cloudflare Tunnels. - Experience working with Azure, AWS, on prem, and enterprise application environments. Originally posted on Himalayas