Area(s) of responsibility
Skills: Network Security-WAAP
Experience: 6-10 years
Location: (Bangalore Preferred)/ Mumbai/ Pune/ Noida/ Hyderabad/ Chennai
Key Responsibilities
WAAP Responsibilities (Primary Focus)
Architect, implement, and manage WAAP platforms, including:
Web Application Firewall (WAF)
API Security (discovery, protection, runtime analysis)
Bot Management
DDoS Protection (L3–L7)
Design and deploy WAAP solutions using platforms such as:
Thales Imperva
Cloud-native WAFs (Azure, AWS WAF) or equivalent
Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
Perform false positive tuning, policy optimization, and rule lifecycle management.
Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
Integrate WAAP with:
Onboard applications into WAAP platforms
Perform security assessments and risk reviews
Ensure minimal performance impact while enforcing strong security controls
Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
Lead WAAP incident response and root cause analysis for application-layer attacks.
Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).
WAAP & Application Security Expertise (Mandatory)
Solid experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
Deep understanding of:
OWASP Top 10 (Web & API)
Application-layer threats and mitigation techniques
Hands-on experience in:
WAF policy creation and tuning
API security controls (schema validation, authentication enforcement)
Bot mitigation strategies
DDoS protection architecture (L3–L7)