WAF – Web Application FirewallTechnical Skills

- 7+ years of experience in Information, Application, Network, Cloud, or Infrastructure Security.

- Hands-on knowledge of WAF implementation, policy configuration, rule tuning, alert analysis, false-positive handling, and enforcement.

- Solid understanding of DNS, HTTP/HTTPS, TLS, reverse proxies, load balancers, CDNs, API gateways, and traffic routing.

- Working knowledge of OWASP Top 10, injection, XSS, authentication/access control issues, bots, and DDoS risks.

- Familiarity with cloud security and WAF solutions such as AWS WAF, Azure WAF, Google Cloud Armor, Akamai, Cloudflare, F5, or Imperva.

- Experience across on-prem, hybrid, cloud, SaaS, containerized, and API environments.

- Experience coordinating security implementations across application, network, cloud, infrastructure, DNS, vendor, and business teams.

- Knowledge of change management, cutover/rollback planning, testing, validation, and post-production monitoring.

- Ability to review architecture diagrams, traffic flows, DNS records, certificates, WAF logs, and implementation evidence.





- Experience with ServiceNow, Jira, Confluence, SharePoint, or similar tools.

- Ability to maintain trackers, dashboards, risk logs, test plans, status reports, and implementation documentation.

Soft Skills

- Strong stakeholder, program management, and cross-functional collaboration skills.

- Excellent communication skills with technical and non-technical stakeholders.

- Strong ownership, organization, problem-solving, and influencing abilities.

- Ability to manage multiple WAF implementations, dependencies, risks, and escalations.

Good to Have

- Experience with CDN, DDoS, bot management, API security, and edge security.

- Familiarity with Terraform, IaC, TLS certificate management, WAF log analysis, and security monitoring.

- Relevant certifications: Security+, AWS/Azure Security, CCSP, CCSK, CISSP, or equivalent.

- Experience in regulated industries such as banking, financial services, healthcare, or insurance.

📌 Web Application firewall (Bengaluru)
🏢 Spigot Software
📍 Bengaluru