We are looking for an experienced WAF Engineer with strong hands-on expertise in Web Application Firewall (WAF), Load Balancers, Global Load Balancers (GLB), application-layer security, threat analysis, L7 DDoS protection, SQL Injection and BOT management.

The candidate will be responsible for designing, implementing, monitoring, troubleshooting, and tuning application security and traffic-management solutions across enterprise environments.

Key Responsibilities

- Design, configure, implement, and manage WAF, Load Balancer and Global Load Balancer solutions.- Configure and maintain WAF security policies, rules, signatures, exceptions, and custom security controls.- Analyze and mitigate application-layer attacks including SQL Injection, Cross-Site Scripting (XSS), OWASP Top 10 attacks, HTTP/HTTPS-based attacks, Application-layer DDoS / L7 DoS, Malicious and automated BOT traffic- Perform threat analysis and investigate suspicious application traffic and security events.- Analyze WAF logs, HTTP/HTTPS traffic, attack patterns,



and security alerts to identify threats and false positives.- Develop and fine-tune WAF policies to balance security and application availability.- Configure BOT protection / BOT management policies to identify and mitigate malicious automated traffic.- Implement and manage L7 DDoS protection mechanisms and mitigation strategies.- Work on Global Load Balancing concepts such as DNS-based traffic distribution, geographic load balancing, application availability, and disaster recovery.- Troubleshoot application connectivity, performance, SSL/TLS, routing, and load-balancing issues.- Collaborate with network, security, application, and infrastructure teams for incident resolution.- Participate in security incident investigation, RCA, and remediation activities.- Monitor system performance, capacity, availability, and security posture.- Prepare technical documentation, operational procedures, and incident reports.

Candidate Profile

- Strong understanding of application security and Layer 7 traffic management.- Hands-on experience in WAF policy implementation and tuning.- Good analytical and troubleshooting skills for identifying application and security-related issues.- Ability to analyze attack signatures, HTTP requests, headers, URLs, parameters, and payloads.- Experience handling security incidents involving SQL Injection, BOT attacks, L7 DoS/DDoS and malicious web traffic.- Valuable communication and coordination skills.

📌 Senior Network Engineer (Mumbai)
🏢 CtrlS Datacenters
📍 Mumbai