Area(s) of Responsibility Skills: Network Security-WAAP

Experience: 8-11 years

Location: Bangalore Only

Key ResponsibilitiesWAAP Responsibilities (Primary Focus)

- Architect, implement, and manage WAAP platforms, including:
- Web Application Firewall (WAF)
- API Security (discovery, protection, runtime analysis)
- Bot Management
- DDoS Protection (L3-L7)

- Design and deploy WAAP solutions using platforms such as:

- Thales Imperva
- Cloud-native WAFs (Azure, AWS WAF) or equivalent

- Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.

- Perform false positive tuning, policy optimization, and rule lifecycle management.

- Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.

- Integrate WAAP with

- SIEM/SOAR platforms
- Identity providers
- Threat intelligence feeds

- Collaborate with application teams to:

- Onboard applications into WAAP platforms
- Perform security assessments and risk reviews
- Ensure minimal performance impact while enforcing strong security controls

- Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).

- Lead WAAP incident response and root cause analysis for application-layer attacks.

- Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).





- Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

- Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).

- Deep understanding of
- OWASP Top 10 (Web & API)
- Application-layer threats and mitigation techniques

- Hands-on experience in:

- WAF policy creation and tuning
- API security controls (schema validation, authentication enforcement)
- Bot mitigation strategies
- DDoS protection architecture (L3-L7)

- Experience in:

- Traffic analysis (HTTP/HTTPS, TLS inspection)
- Behavioral-based threat detection

- Robust understanding of:

- Secure application architectures (monolith, microservices, APIs)
- DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

- Strong hands-on experience in:
- Firewalls (Fortinet, Palo Alto, Juniper)
- IDS/IPS, VPN, SIEM

- Expertise in:

- Firewall policy design, NAT, routing, inspection, and threat prevention

- Experience in designing secure:

- Hybrid (on-prem cloud internet-facing) environments

- Experience in:

- Proxy architectures (forward/reverse)

Locations

Country/Region: IN

Requisition ID: 38583

Work Model:

Position Type:

Salary Range:

Location: INDIA - BENGALURU - HP

📌 Title: Sr Network Security Engineer (India)
🏢 Birlasoft
📍 India