At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
Job Description: Senior Web Application Firewall (WAF) Engineer
Experience Level: 3–5 Years
Role Type: Full-Time
Role Overview
We are seeking a Senior Web Application Firewall (WAF) Engineer to own and drive the end-to-end lifecycle of our application security gateway infrastructure. Spanning the complete service delivery model—Assess, Build, Transition, and Operations—this role requires deep technical proficiency in protecting contemporary web applications, APIs, and microservices against sophisticated Layer 7 attacks (including OWASP Top 10, botnets, and DDoS). The ideal candidate will have hands-on experience tuning advanced WAF rule sets, managing positive and negative security models,
and collaborating closely with application development and DevOps teams.
Key Responsibilities
Assess (Architecture Review & Threat Modeling)
• Conduct thorough security assessments of existing web applications, API endpoints, and ingress traffic architectures.
• Analyze current WAF policies, anomaly scores, and signature rulesets to identify coverage gaps against the OWASP Top 10 and API Security Top 10.
• Collaborate with development and architecture teams to threat-model upcoming applications and define WAF integration requirements.
• Audit SSL/TLS termination configurations, cipher suites, and certificate lifecycles at the edge.
Build (Deployment & Policy Engineering)
• Deploy, configure, and manage enterprise WAF solutions (e.g., Cloudflare Enterprise, Akamai Kona, Imperva, F5 Advanced WAF/BIG-IP ASM, or AWS WAF).
• Design and implement both negative security models (signatures, regex blocks) and positive security model
📌 GMS-Senior-Web Application Firewall (India)
🏢 EY
📍 India