Country/Region: IN

Requisition ID: 38587

Work Model:

Position Type:

Salary Range:

Location: INDIA - BENGALURU - HP

Title: Network Security Architect with WAAP

Description:

Area(s) of responsibility

Skills: Network Security-WAAP

Experience: 8-11 years

Location: Bangalore Only

Key Responsibilities

WAAP Responsibilities (Primary Focus)

- Architect, implement, and manage WAAP platforms, including:
- - Web Application Firewall (WAF)
- API Security (discovery, protection, runtime analysis)
- Bot Management
- DDoS Protection (L3–L7)

- Design and deploy WAAP solutions using platforms such as:
- - Thales Imperva
- Cloud-native WAFs (Azure, AWS WAF) or equivalent

- Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
- Perform false positive tuning, policy optimization, and rule lifecycle management.
- Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
- Integrate WAAP with:
- - SIEM/SOAR platforms
- Identity providers
- Threat intelligence feeds

- Collaborate with application teams to:
- - Onboard applications into WAAP platforms
- Perform security assessments and risk reviews
- Ensure minimal performance impact while enforcing strong security controls

- Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).




- Lead WAAP incident response and root cause analysis for application-layer attacks.
- Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
- Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

- Robust experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
- Deep understanding of:
- - OWASP Top 10 (Web & API)
- Application-layer threats and mitigation techniques

- Hands-on experience in:
- - WAF policy creation and tuning
- API security controls (schema validation, authentication enforcement)
- Bot mitigation strategies
- DDoS protection architecture (L3–L7)

- Experience in:
- - Traffic analysis (HTTP/HTTPS, TLS inspection)
- Behavioral-based threat detection

- Strong understanding of:
- - Secure application architectures (monolith, microservices, APIs)
- DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

- Strong hands-on experience in:
- - Firewalls (Fortinet, Palo Alto, Juniper)
- IDS/IPS, VPN, SIEM

- Expertise in:
- - Firewall policy design, NAT, routing, inspection, and threat prevention

- Experience in designing secure:
- - Hybrid (on-prem + cloud + internet-facing) environments

- Experience in:
- - Proxy architectures (forward/reverse)

📌 Network Security Architect with WAAP (India)
🏢 Birlasoft
📍 India