Area(s) of responsibility

Skills: Network Security-WAAP

Experience: 6-10 years

Location: (Bangalore Preferred)/ Mumbai/ Pune/ Noida/ Hyderabad/ Chennai

Key Responsibilities

WAAP Responsibilities (Primary Focus)

- Architect, implement, and manage WAAP platforms, including:
- Web Application Firewall (WAF)
- API Security (discovery, protection, runtime analysis)
- Bot Management
- DDoS Protection (L3–L7)

- Design and deploy WAAP solutions using platforms such as:

- Thales Imperva
- Cloud-native WAFs (Azure, AWS WAF) or equivalent

- Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
- Perform false positive tuning, policy optimization, and rule lifecycle management.
- Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
- Integrate WAAP with:

- SIEM/SOAR platforms
- Identity providers
- Threat intelligence feeds

- Collaborate with application teams to:

- Onboard applications into WAAP platforms
- Perform security assessments and risk reviews
- Ensure minimal performance impact while enforcing solid security controls

- Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
- Lead WAAP incident response and root cause analysis for application-layer attacks.
- Define and track application security metrics and KPIs (attack trends,



mitigation effectiveness).
- Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

- Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
- Deep understanding of:
- OWASP Top 10 (Web & API)
- Application-layer threats and mitigation techniques

- Hands-on experience in:

- WAF policy creation and tuning
- API security controls (schema validation, authentication enforcement)
- Bot mitigation strategies
- DDoS protection architecture (L3–L7)

- Experience in:

- Traffic analysis (HTTP/HTTPS, TLS inspection)
- Behavioral-based threat detection

- Strong understanding of:

- Secure application architectures (monolith, microservices, APIs)
- DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

- Strong hands-on experience in:
- Firewalls (Fortinet, Palo Alto, Juniper)
- IDS/IPS, VPN, SIEM

- Expertise in:

- Firewall policy design, NAT, routing, inspection, and threat prevention

- Experience in designing secure:

- Hybrid (on-prem cloud internet-facing) environments

- Experience in:

- Proxy architectures (forward/reverse)

Secure internet gateways

📌 Network Security Engineer-WAAP (Bengaluru)
🏢 Birlasoft
📍 Bengaluru