Work Requirements:

WFO 3 to 5 Days in a week.

Notice Period: Immediate or 15 Days only.

We are seeking an experienced Senior WAAP (Web Application & API Protection) Security Engineer to design, implement, and manage enterprise-grade WAAP solutions that safeguard web applications, APIs, and digital assets. The ideal candidate will have extensive expertise in WAF, API Security, Bot Management, DDoS Protection, and cloud security, with a strong focus on delivering scalable and resilient security architectures across global enterprise environments.

Key Responsibilities:

- Design, implement, and manage WAAP solutions, including Web Application Firewall (WAF), API Security, Bot Management, and DDoS Protection.
- Configure and optimize WAAP platforms such as Thales Imperva, Akamai, and cloud-native WAF solutions.
- Develop and maintain custom WAF rules, signatures, and security policies to protect enterprise applications.
- Perform API discovery, classification, and security policy enforcement.
- Integrate WAAP solutions with SIEM platforms, identity providers, and threat intelligence feeds.
- Lead incident response activities related to web application and API security threats.
- Conduct security architecture reviews and ensure compliance with industry standards and security frameworks.
- Collaborate with cybersecurity, infrastructure, and application teams to strengthen the organization's security posture.
- Monitor, analyze,



and respond to emerging web application threats and vulnerabilities.
- Support audits, risk assessments, and continuous improvement of enterprise security controls.

Required Skills & Qualifications:

- 10 years of experience in Network Security and Application Security.
- Hands-on experience with WAAP platforms such as Akamai WAAP, Thales Imperva WAF, and Cloud-native WAFs (AWS WAF, Azure WAF, Google Cloud Armor).
- Strong understanding of Web Application Firewall (WAF), API Security, Bot Management, DDoS Protection, and OWASP Top 10 vulnerabilities.
- Experience creating and tuning WAF security policies and custom rules.
- Strong knowledge of Firewalls, IDS/IPS, VPN Technologies, SIEM Platforms, and Secure Proxy Architectures.
- Experience securing cloud environments across AWS, Azure, and GCP.
- Excellent troubleshooting, analytical, and incident response skills.
- Strong communication and stakeholder management abilities.

Preferred Qualifications:

- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
- Industry certifications such as CCNP / CCIE, JNCIE, CISSP, CISM, Akamai Certified Qualified, and AWS Certified Security - Specialty.
- Experience working in large-scale global enterprise environments and implementing defense-in-depth security strategies.

📌 LanceSoft - Senior Network Security Engineer - Web Application & API Protection (India)
🏢 Lancesoft India
📍 India