WAF (Radware) L1 and L2 Analyst

As a Security Analyst, you will be responsible for monitoring and maintaining the Web Application Firewall (WAF) alerts and logs, specifically focusing on Radware. Your primary tasks will include performing initial triage and basic troubleshooting of security incidents, escalating complex issues to the L2 team with detailed incident documentation, and regularly checking policy violations to suggest tuning recommendations. Additionally, you will be required to conduct health checks of WAF systems to ensure uptime and maintain shift handover logs for seamless communication within the team. Moving on to L2 responsibilities, you will be tasked with managing WAF policy configurations and rule tuning for the Radware WAF. This will involve analyzing web traffic and logs to detect and mitigate application-layer attacks such as OWASP Top 10. You will collaborate closely with application and network teams to implement protection strategies, conduct Root Cause Analysis (RCA) of incidents, and fine-tune policies to reduce false positives. Furthermore, you will take the lead in WAF upgrades, patching, and performance tuning while providing mentorship and support to L1 analysts. To excel in this role, you should possess a strong understanding of Radware AppWall or equivalent WAF platforms, along with familiarity in areas such as HTTP/HTTPS, SSL certificates, DNS, Load Balancers, and Web Servers. Experience in threat analysis and mitigation of common vulnerabilities like SQLi, XSS, and CSRF is essential. Moreover, knowledge of ITIL processes and incident management tools like ServiceNow is expected. Hands-on experience with packet analysis tools such as Wireshark would be advantageous, and holding security certifications like CEH, CompTIA Security+, or vendor-specific Radware certifications is preferred.,