3.0 - 7.0 years

5 - 9 Lacs

Bengaluru

Hybrid

JOB POSITION We are seeking a Web Application Firewall Engineer (WAF Engineer) or Application Security Engineer (WAF) within our InfoSec team to help support our strategic security and compliance objectives. As an Application Security Engineer (WAF), you will partner with Application Security team, and will be a part of a fast-paced, results-driven, multi-national InfoSec organization. You will design, configure, deploy, and support the Web Application Firewall (WAF), DoS and BOT mitigation policies as well as CDN and caching configurations for on premise and in the cloud WAF deployments. The candidate will work closely with other members of the application security team, including security analysts, penetration testers, and leaders, to ensure that our applications are secure and compliant with industry standards. JOB RESPONSIBILITY Analyst IT Security II (IND) (Web Application Firewall Engineer (WAF Engineer) or Application Security Engineer (WAF)) : Able to demonstrate understanding of extensive working experience with DNS, network protocols and web technologies (e.g. IP, TCP, UDP, SSL/TLS, HTTP/HTTPS, gRPC, web sockets). Provide operational support, trouble shooting and maintenance of major Security related processes, controls or products. Analyze, configure, test, document and implement upgrades to WAF security processes, controls or products. Recognize, analyze patterns, and respond to security events and escalates as necessary. Consult with technical and business peers to analyze, support, and resolve Cybersecurity events. Engineer, configure, deploy, and maintain Web Application Firewall (WAF) solutions. Configure new sites and applications for WAF protection and perform analysis of traffic to remove false positives. Work with application developers and developer teams to analyze, prioritize, and support WAF configurations or application remediation to address security issues. Develop, maintain, test, patch and troubleshoot WAF rules/signatures to mitigate threats and implements best practices. Demonstrate experience in delivering technical projects with an ability to manage multiple priorities. Excellent problem-solving and analytical skills Effective communication and interpersonal skills Ability to work independently and in a team environment. QUALIFICATION EXPERIENCE Experience working in large organizations (25,000+) in fast paced environments with competing projects and priorities. Experience with large-scale application onboardings to WAF, and/or migrations between WAF solutions Confidence to lead triage calls for security events, web traffic disruptions or network outages. SKILLS AND COMPETENCIES Bachelors degree or equivalent years (4-8+) as an Application Security Analyst/Engineer and WAF Security Engineer Cybersecurity, privacy principles, threats, vulnerabilities, risk management, and IT security methods. (e.g., firewalls, dmz, encryption, SSL certificates). Network security architecture concepts and protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and IAM/directory services (e.g. Okta, Siteminder, Ping, LDAP) Experience working with industry standard WAF solutions like CloudFlare, Akamai, F5 Networks, Imperva, Fastly, etc. Knowledge of Layer 7 security attacks and application security vulnerabilities (OWASP Top 10, SANS Top 25, XSS, SQLi, CMDi, RCE, CSRF/SSRF, CVEs and CWEs, etc.) Basic understanding of CDN and caching techniques, Load Balancing, etc. Basic understanding of various Clouds (AWS, GCP, Azure, Oracle Cloud)

Posted 2 weeks ago

Apply

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.