Summary
The GCP Cloud WAF Engineer plays a critical role within the ECB Programme, responsible for deploying and managing WAF solutions across all internet-facing and internal web applications to ensure compliance with the Bank’s regulatory requirements. Operating as part of the Run the Bank team using Agile methodologies, this role involves close collaboration with Global Business Teams to develop custom WAF rules, manage exceptions, conduct false positive analysis, and maintain baseline security policies. The engineer will serve as a key technical liaison with vendor teams, HSBC Cloud Platform Leads, and Change Teams, ensuring timely resolution of service requests and seamless implementation. With a strong focus on DevSecOps, the role supports automation pipelines, identifies opportunities for process optimization, and ensures robust security posture across cloud environments. This position demands proactive risk identification, stakeholder engagement, and clear communication with senior leaders across Business, Cloud, Compliance, and Cyber functions.
Location:
Pune / Mumbai / Bangalore / Chennai / Hyderabad / Noida
Responsibilities
Design, implement, and maintain WAF policies and configurations across GCP and hybrid environments.
Develop and deploy custom WAF rules to address application-specific threats and security gaps.
Conduct false positive analysis and fine-tune WAF rules to balance security and application availability.
Support baseline policy updates and ensure alignment with MVP and regulatory standards.
Collaborate with Global Business Teams, Change Teams, and Project Managers to manage WAF-related requests and service issues.
Provide technical leadership in resolving WAF incidents, including coordination with SOC during security events.
Maintain and enhance DevSecOps automation pipelines for WAF configuration and deployment.
Identify and implement current automation use cases to improve operational efficiency and security.
Manage version control, update