Web Application Specialist

As a Web Application Security professional, you will be responsible for the following key tasks: - Managing Licensing, Backup, and Restoration, and implementing Automation where feasible - Ensuring Compliance with Baseline and Vulnerability Assessment standards - Periodically reviewing and updating existing policies, processes, documentations, and configurations - Configuring and maintaining WAF devices to protect against common web vulnerabilities - Monitoring WAF logs and alerts to identify and respond to potential security incidents - Providing ongoing support to existing monitoring capabilities and data collection systems - Creating WAF rules and signatures to mitigate threats - Developing policies for onboarding new applications - Generating advanced alerts and reports to meet key stakeholders" requirements - Uploading new ASM signatures and proactively implementing corrective actions to mitigate risks - Sharing blocked request details and fine-tuning WAF policies based on application team requests - Participating in drill activities to ensure traffic security - Working on the onboarding of new sites and production instances behind WAF - Fine-tuning WAF rules based on OWASP guidelines and coordinating with various teams to fix security flaws - CDN fine-tuning for better performance, multiple origin configurations, redirects, rewrites, and certificate issues - Conducting periodic risk assessments and security audits to identify gaps and vulnerabilities - Participating in Proof of Concept (PoC) for new technologies - Participating in the End-to-End rollout of new technologies, solutions, or products and taking appropriate handover from the Project team for operations - Preparing various documents such as SOPs, Architecture Diagrams, Inventory & Asset Management, IAM, Configuration and Policy documents, and Incident Management procedures - Configuring and Reviewing Role-Based Access Controls - Ensuring compliance with all internal and external audit observations Mandatory technology skills required for this role include proficiency in NGINX WAF, F5 WAF, NSX WAF, Akamai WAF, and Micro-segmentation.,