Key Responsibilities
Translate business and application security requirements into enterprise-grade WAAP and network security architectures.
Lead architecture, design, and deployment of Web Application and API Protection (WAAP) solutions across global environments.
Develop and drive multi-year roadmap for application-layer security, including WAF, API security, bot protection, and DDoS mitigation.
WAAP Responsibilities (Primary Focus)
Architect, implement, and manage WAAP platforms, including:
Web Application Firewall (WAF)
API Security (discovery, protection, runtime analysis)
Bot Management
DDoS Protection (L3-L7)
Design and deploy WAAP solutions using platforms such as: Thales Imperva o Cloud-native WAFs (Azure, AWS WAF) or equivalent
Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
Perform false positive tuning, policy optimization, and rule lifecycle management.
Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
Integrate WAAP with SIEM/SOAR platforms
Integrate WAAP with Identity providers
Integrate WAAP with Threat intelligence feeds
Collaborate with application teams to onboard applications into WAAP platforms
Perform security assessments and risk reviews
Ensure minimal performance impact while enforcing robust security controls
Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
Lead WAAP incident response and root cause analysis for application-layer attacks.
Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).
Core Network Security Responsibilities
Architect and maintain secure network infrastructure across data center, campus, and cloud settings.
Conduct security design reviews ensuring compliance with enterprise security standards.
Provid
📌 Senior Network Security Engineer Bengaluru (India)
🏢 UST
📍 India