Location: INDIA - BENGALURU - HP
Title: Network Security Engineer-WAAP
Description:
Area(s) of responsibility
Skills: Network Security-WAAP
Experience: 6-10 years
Location: (Bangalore Preferred)/ Mumbai/ Pune/ Noida/ Hyderabad/ Chennai
Key Responsibilities
WAAP Responsibilities (Primary Focus)
- Architect, implement, and manage WAAP platforms, including:
- - Web Application Firewall (WAF)
- API Security (discovery, protection, runtime analysis)
- Bot Management
- DDoS Protection (L3–L7)
- Design and deploy WAAP solutions using platforms such as:
- - Thales Imperva
- Cloud-native WAFs (Azure, AWS WAF) or equivalent
- Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
- Perform false positive tuning, policy optimization, and rule lifecycle management.
- Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
- Integrate WAAP with:
- - SIEM/SOAR platforms
- Identity providers
- Threat intelligence feeds
- Collaborate with application teams to:
- - Onboard applications into WAAP platforms
- Perform security assessments and risk reviews
- Ensure minimal performance impact while enforcing solid security controls
- Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
- Lead WAAP incident response and root cause analysis for application-layer attacks.
- Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
- Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).
WAAP & Application Security Expertise (Mandatory)
- Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
- Deep understanding of:
- - OWASP Top 10 (Web & API)
- Application-layer threats and mitigation techniques
- Hands-on experience in:
- - WAF policy creation and tuning
- API secur