Senior Cloud WAF Engineer

Purpose

Design, implement, and optimize Cloud WAF policies and controls to secure applications, minimize false positives, and ensure protection against application-layer attacks.

Key Responsibilities
Configure and manage WAF policies across cloud platforms
Implement rule sets (managed + custom) aligned to OWASP and enterprise baseline
Analyze WAF alerts and logs to:
Reduce false positives
Improve detection accuracy
Manage exclusions, whitelisting, and rule tuning
Block IoCs (IPs, domains, URLs) across WAF layers
Respond to web application attacks and support incident investigations
Perform pre-deployment testing for recent policies and rules
Validate impact on applications and ensure minimal disruption
Troubleshoot:
Blocked application traffic
Failed connectivity
Performance degradation
Perform RCA and recommend corrective actions




Work with DevOps and application teams to secure onboarding
Support integration with API gateways, CDNs, and load balancers
Ensure policies adhere to security standards and compliance requirements
Maintain documentation, change logs, and audit evidence

Qualifications & Experience
Experience
510 years in Network / Application Security
Hands-on experience with WAF platforms in enterprise environments
Technical Skills
Solid hands-on expertise in Cloud WAFs such as Azure WAF, AWS WAF, Cloudflare, Imperva, and F5.
Positive understanding of HTTP / HTTPS protocols, headers, cookies, reverse proxy architecture, request flow, application-layer attacks, load balancers, reverse proxies, and API gateways.

📌 Senior Cloud Waf Engineer Telangana
🏢 Cognizant
📍 Telangana