Sr. Software Dev Engineer, AWS WAF Bot Control and Fraud Prevention

What does WAF (Web Application Firewall) do? We make it easy for customers to author and associate firewall policies to help protect their web applications from attacks by allowing them to configure rules that allow, block, monitor (count), or CAPTCHA web requests based on conditions that they define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection and cross-site scripting.

By supporting association with CloudFront, Application Load Balancer, API Gateway, and AppSync customers can protect their applications and resources whether all in on the Cloud, maintaining on premise data centers, or using a hybrid Cloud approach. What challenges does the WAF Team tackle? We build a highly available low latency distributed system that allows customers to propagate changes worldwide in minutes to respond to active attacks in real-time.

We’re fully integrated with several others AWS Services to give customers the insight and control they need. What is special about the WAF Team? We own the direct customer experience as well as the per request processing of rules for CloudFront, API Gateway, Application Load Balancer, and AppSync.

Not only do we build an AWS Security service, but we’re a customer of AWS using other AWS services to provide the solutions to our customers that scale and seamlessly integrate with their existing workflows. Leaders on our team get to solve some of the hardest computer science problems including building highly available distributed micro-services and global scaling across both AWS Regions and CloudFront edge locations.