Job Summary: We are seeking a highly skilled Senior Network Security Engineer with a focus on Web Application and API Protection (WAAP) to join our team in Bangalore. The ideal candidate will be responsible for translating business and application security requirements into robust WAAP and network security architectures. This role involves leading the architecture, design, and deployment of WAAP solutions across global environments, ensuring the security of critical applications while maintaining optimal performance.
Responsibilities
Translate business and application security requirements into enterprise-grade WAAP and network security architectures.
Develop and support solutions aligned with Client’s application security and defense-in-depth strategy.
Lead the architecture, design, and deployment of WAAP solutions, including Web Application Firewalls (WAF), API security, bot management, and DDoS protection.
Develop and drive a multi-year roadmap for application-layer security.
Architect, implement, and manage WAAP platforms, ensuring effective protection against OWASP Top 10 vulnerabilities.
Design and deploy WAAP solutions using platforms such as Thales, Imperva, and cloud-native WAFs (Azure, AWS WAF).
Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
Perform false positive tuning, policy optimization, and rule lifecycle management.
Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
Integrate WAAP with SIEM/SOAR platforms, identity providers, and threat intelligence feeds.
Collaborate with application teams to onboard applications into WAAP platforms and perform security assessments.
Lead WAAP incident response and root cause analysis for application-layer attacks.
Define and track application security metrics and KPIs.
Ensure compliance with security frameworks