Job Description

We are looking for an experienced WAF Engineer with strong hands-on expertise in Web Application Firewall (WAF), Load Balancers, Global Load Balancers (GLB), application-layer security, threat analysis, L7 DDoS protection, SQL Injection and BOT management.

n

The candidate will be responsible for designing, implementing, monitoring, troubleshooting, and tuning application security and traffic-management solutions across enterprise environments.

n

Key Responsibilities

n

n
- Design, configure, implement, and manage WAF, Load Balancer and Global Load Balancer solutions.
n
- Configure and maintain WAF security policies, rules, signatures, exceptions, and custom security controls.
n
- Analyze and mitigate application-layer attacks including SQL Injection, Cross-Site Scripting (XSS), OWASP Top 10 attacks, HTTP/HTTPS-based attacks, Application-layer DDoS / L7 DoS, Malicious and automated BOT traffic
n
- Perform threat analysis and investigate suspicious application traffic and security events.
n
- Analyze WAF logs, HTTP/HTTPS traffic, attack patterns, and security alerts to identify threats and false positives.
n
- Develop and fine-tune WAF policies to balance security and application availability.
n
- Configure BOT protection / BOT management policies to identify and mitigate malicious automated traffic.
n




- Implement and manage L7 DDoS protection mechanisms and mitigation strategies.
n
- Work on Global Load Balancing concepts such as DNS-based traffic distribution, geographic load balancing, application availability, and disaster recovery.
n
- Troubleshoot application connectivity, performance, SSL/TLS, routing, and load-balancing issues.
n
- Collaborate with network, security, application, and infrastructure teams for incident resolution.
n
- Participate in security incident investigation, RCA, and remediation activities.
n
- Monitor system performance, capacity, availability, and security posture.
n
- Prepare technical documentation, operational procedures, and incident reports.
n

n

Candidate Profile

n

n
- Robust understanding of application security and Layer 7 traffic management.
n
- Hands-on experience in WAF policy implementation and tuning.
n
- Good analytical and troubleshooting skills for identifying application and security-related issues.
n
- Ability to analyze attack signatures, HTTP requests, headers, URLs, parameters, and payloads.
n
- Experience handling security incidents involving SQL Injection, BOT attacks, L7 DoS/DDoS and malicious web traffic.
n
- Good communication and coordination skills.
n

📌 Senior Network Engineer (Hyderabad)
🏢 CtrlS Datacenters
📍 Hyderabad