WAF Engineer

São Paulo Remote

At Cadmus, we believe that technology only makes sense when it truly transforms lives and businesses. For over 30 years, we have been building solutions that combine innovation, closeness, and real impact — and this is just the beginning.

Here, you are no longer just another person. You are the protagonist of a journey that values ideas, fosters growth, and makes room for the new. Our culture, recognized by GPTW, reflects what we experience every day: collaboration, continuous learning, and respect for people.

If you want to be part of a team that not only keeps up with the future but helps build it, Cadmus is the place for you. Come grow with us.

Role Summary
The WAF Engineer will act as a subject matter expert responsible for the design, implementation, and 
ongoing optimization of Web Application Firewall (WAF) solutions in a global enterprise environment. The 
role focuses on protecting web applications, APIs, and digital assets through scalable and resilient 
security controls. The engineer will collaborate with security, infrastructure, DevOps, and application 
teams to ensure effective threat mitigation and alignment with enterprise security standards, with a 
strong emphasis on modern WAF platforms, including Akamai 

Key Responsibilities
• Design, configure, and optimize WAF policies, rules, and protection mechanisms
• Develop and maintain custom security rules aligned with OWASP Top 10 and emerging threats
• Monitor, analyze, and respond to WAF logs, alerts, and security events
• Support implementation and tuning of WAF solutions in cloud and hybrid environments
• Collaborate with cross-functional teams to ensure secure application and API exposure
• Implement automation and scripting to improve WAF configuration, deployment, and governance
• Provide guidance on application security, API protection, and edge security best practices
• Participate in incident response activities related to web-based threats and attacks
• Contribute to continuous improvement of the organization’s cybersecurity posture

Requirements

Required Qualifications / Skills
• Strong hands-on experience with Web Application Firewall (WAF) technologies
• Knowledge of Akamai WAF or similar enterprise-grade WAF platforms
• Solid understanding of HTTP/HTTPS, TLS, DNS, CDN architectures, and API security
• Deep knowledge of OWASP Top 10 and common web application attack vectors
• Experience with scripting and automation (Python, Bash, or PowerShell)
• Familiarity with Infrastructure as Code tools such as Terraform is a plus
• Knowledge of cloud environments such as AWS, Azure, or GCP
• Experience with vulnerability management and secure application practices
• Strong analytical and problem-solving skills
• Excellent communication skills with the ability to interact with global teams
• Fluent English is mandatory (written and spoken) 

Experience Requirements
• 5+ years of hands-on experience working with WAF technologies
• 6+ years of overall experience in IT, with a focus on cybersecurity or application security
• Experience in global or enterprise-scale environments is highly preferred

Education
Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related field, or 
equivalent professional experience

Preferred Qualifications
• Experience with Akamai ecosystem (WAF, CDN, edge security)
• Background in API security and modern application architectures
• Relevant security certifications such as CISSP, CISM, CISA, or GIAC are a plus

Working Model & Collaboration
This role operates in a global environment, collaborating with international teams across multiple time 
zones. The engineer will work closely with cybersecurity, infrastructure, and application teams to ensure 
consistent protection of enterprise platforms.