Role & responsibilities

Core Skills / Technical Requirements
Extensive experience in Web Application Security and log analysis, with a robust background in Cyber SOC/CSIRT operations.
WAF Engineer SME: with any one cloud experience GCP or AWS or Azure.
Cloud Native WAFs
AWS WAF
Azure WAF
Google Cloud (GCP) WAF
ModSecurity (ModSec)
Multi-vendor WAF solutions such as F5 and Akamai
Hands-on experience with edge, cloud, and on-premises WAF platforms.
Strong expertise in cloud technologies and native security controls, preferably including AWS, Azure, and GCP.
Deep understanding of:
Web application security concepts
Common attack vectors (OWASP Top 10)
Security mitigations and best practices
Proficient in:
WAF configuration, tuning, and optimisation
Custom WAF rule development
Security policy creation and management
Ability to design and implement bespoke WAF processes, standards, and documentation.
Experience evaluating and aligning platforms to MVP and Baseline Security Configurations.




Experience supporting DevSecOps pipelines and security automation initiatives.
Knowledge of Identity and Access Management (IAM/IDAM) protocols and access control mechanisms for WAF administration.
Solid understanding of:
HTTPS inspection
SSL/TLS termination
Certificate lifecycle management
Experience implementing and managing rate-limiting controls and web application protection mechanisms.
Understanding of WAF version control, upgrades, patching, and change management processes.
Ability to identify, configure, and document platform logging and monitoring requirements from a security perspective.
Experience collaborating with SOC teams during WAF-related security incidents and investigations.
Valuable understanding of:
Network connectivity and troubleshooting
Service management processes
Infrastructure support environments

Other Skills
Strong stakeholder and vendor management capabilities.
Excellent analytical skills

📌 Cloud Native Waf Engineer Bengaluru (India)
🏢 LTM
📍 India