Network Security (WAF) Engineer

As a Network Security Engineer (Web Application Firewall) you will play a key role in protecting McKessons global technology environment by designing implementing and optimising security controls across cloud and on-premises platforms. You will work closely with infrastructure application and cybersecurity teams to secure internet-facing applications strengthen network security controls and reduce organisational risk. This role combines hands-on engineering with security consulting helping teams integrate security into technology solutions while maintaining application availability and performance. You will also contribute to incident response risk reduction initiatives and the continuous improvement of McKessons cybersecurity capabilities.

• Design implement and maintain Web Application Firewall (WAF) protections for internet-facing applications including custom security policies rate limiting geo-blocking and threat detection rules.
• Develop and manage network security controls including firewall policies network segmentation ingress and egress controls and secure access configurations.
• Partner with application infrastructure and engineering teams to understand application architectures traffic flows and business requirements ensuring security controls are both effective and operationally sustainable.
• Analyse network traffic security events and application behaviour to identify risks investigate security concerns and improve detection capabilities.
• Evaluate implement and optimise security technologies and controls to enhance protection against vulnerabilities emerging threats and unauthorised access.
• Support incident response forensic investigations vulnerability remediation activities and disaster recovery planning by providing technical security expertise.
• Document security architectures configurations procedures and standards while promoting security best practices across technology teams.

• 4 years of experience implementing and supporting enterprise network security technologies including firewalls web application firewalls or intrusion prevention systems.
• Experience configuring and managing Web Application Firewall (WAF) solutions to protect internet-facing applications and APIs.
• Experience designing implementing and maintaining firewall rules network segmentation controls and access management policies in enterprise environments.
• Strong understanding of TCP/IP networking application traffic flows DNS HTTP/HTTPS and network security architecture principles.
• Experience analysing network traffic security logs and security events to support investigations threat detection and incident response activities.
• Experience assessing security risks validating security control effectiveness and identifying opportunities to improve security posture.
• Strong documentation skills with experience creating technical documentation security standards procedures and configuration records.

• Minimum Education & Typical Experience or Equivalent Combination: Bachelors degree or equivalent combination of education and experience with 4 years of experience in cybersecurity engineering network security infrastructure security or a related technical field.
• Experience securing cloud-based environments and applications within AWS Azure or other enterprise cloud platforms.
• Knowledge of Operational Technology (OT) security supply chain security or AI security risks and associated controls.
• Experience mentoring team members and contributing to technical leadership security best practices and continuous improvement initiatives.