Summary:
The Cloud WAF Engineer (GCP) plays a critical role within the ECB Programme, driving the deployment and management of Web Application Firewall (WAF) solutions across all client-facing and internal web applications to ensure compliance with regulatory standards. Operating as part of the Run the Bank team using Agile methodologies, this role involves close collaboration with Global Business Teams, Cyber, Compliance, and Cloud Platform Leads to develop custom WAF rules, manage exceptions, conduct false positive analysis, and maintain baseline policies. The engineer will serve as a key technical advisor on WAF strategy, support DevSecOps automation pipelines, and ensure seamless service delivery through effective coordination with Change Teams and stakeholders. With a focus on proactive risk identification, status reporting, and incident response, the role is essential in strengthening the organization’s security posture across cloud environments, particularly within GCP.
Location:PAN INDIA
Responsibilities:
Design, configure, and tune WAF policies for cloud (GCP), edge,
and on-premises environments.
Develop and implement custom WAF rules to address security gaps and evolving threat landscapes.
Lead false positive analysis and baseline policy optimization in alignment with security best practices.
Collaborate with Global Business Teams and Cyber/Compliance stakeholders to manage exceptions and ensure regulatory adherence.
Support DevSecOps initiatives by maintaining and enhancing automation pipelines for WAF configuration and deployment.
Identify and implement current automation opportunities to improve efficiency and consistency in WAF operations.
Interface with vendor teams (e.g., F5, Akamai) for technical support, updates, and issue resolution.
Manage multiple WAF service requests concurrently, coordinating with Change Teams and stakeholders for timely resolution.
Provide technical guidance during WAF-related security incidents in coordination with SOC/CSIRT t