Responsibilities include:

- Automation & Orchestration: Design, develop, and maintain automation scripts (e.g., Python, Bash) and API integrations to streamline WAF policy deployments, configuration management, and agent lifecycle operations.
- Incident Response & Event Handling: Act as a key technical responder for application security incidents; analyze WAF event logs, triage alerts, and execute real-time mitigation strategies (such as virtual patching, custom rule blocks, and rate limiting) during active security events.
- Agent Lifecycle Management: Manage large-scale agent deployments, upgrades, and health tracking, developing dashboards and reports to ensure 100% agent coverage across target populations.
- Collaborative Engineering: Partner with engineering, advisory, architecture, and development teams to evaluate and select appropriate security agent solutions for adoption into the firm's workplace.
- Vendor & Stakeholder Relations: Interface with security vendors to resolve complex technical issues, troubleshoot bugs, and collaborate on new feature roadmaps.
- Policy & Configuration Management: Create, deploy, maintain, and troubleshoot WAF policies and configurations for new and existing enterprise web applications.
- Vulnerability Mitigation: Review vulnerability scan outputs and web application vulnerabilities to develop and deploy proactive WAF "Virtual Patching" solutions.
- Traffic Analysis & Tuning: Monitor and analyze activity logs to detect malicious internet traffic, identify indicators of compromise (IoCs), and continuously tune policies to minimize false-positive blocks.
- Developer Advisory: Understand web applications deeply to collaborate with developers on implementing customized protective controls for specific application architectures.
- Threat Intelligence Integration:



Interpret web protocol information to determine the source, intent, and risk level of threat actors, translating these insights into actionable WAF rules.
- Infrastructure Stability: Provide preventative maintenance, rapid troubleshooting, and incident resolution to ensure high availability and stability of security infrastructure and applications.
- Technical Documentation: Create and maintain comprehensive technical documentation, including network diagrams, policy standards, and operational playbooks for WAF infrastructure management.
- Cross-Functional Alignment: Work closely with Application Engineering, the SOC, and Cyber Security teams to ensure security requirements are met and web applications are resilient against cyberattacks.
- Network & OS Fundamentals: Apply a solid understanding of data flow technologies (routing, NAT, ARP), command-line diagnostic tools (e.g., tcpdump), mainstream operating systems, and perimeter security technologies (network firewalls, IPS, web proxies).

BASIC QUALIFICATIONS

- Experience: 5+ years of experience in security engineering, application security, or a closely related DevSecOps role.
- WAF Expertise: Demonstrated hands-on experience in deploying, policy-tuning, and maintaining enterprise-grade WAF solutions (e.g., Signal Sciences, Akamai, Cloudflare, AWS WAF) at scale.
- Scripting & API Automation: Strong scripting skills (Python preferred, Bash, or PowerShell)



with proven experience utilizing RESTful APIs to automate security workflows and tool integrations.
- Incident Response: Proven experience in security incident response, specifically in analyzing, triaging, and mitigating Layer 7 attacks (e.g., OWASP Top 10, DDoS, bot networks) using WAF event telemetry and log analysis.
- Systems Administration: Experience working as a Linux or Windows systems administrator or systems engineer.
- Application Support: Hands-on experience supporting and maintaining critical, high-availability applications with low downtime tolerance.
- Communication: Excellent verbal and written communication skills, with a proven ability to explain complex technical security concepts to both technical and non-technical audiences.
- Problem Solving: Strong conceptual, analytical, and troubleshooting skills.

PREFERRED QUALIFICATIONS

- Professional Certifications: One or more of the following certifications (or equivalent): Certified Information Systems Security Professional (CISSP), AWS Certified Security - Specialty, AWS Certified Solutions Architect, Microsoft Certified: Azure Solutions Architect Expert, or Linux+.
- Infrastructure as Code (IaC): Experience using IaC tools (e.g., Terraform) to automate the provisioning and configuration of WAF and cloud edge security controls.
- SIEM & SOAR Integration: Experience integrating WAF event logs with SIEM platforms (e.g., Splunk) and developing automated incident response playbooks using SOAR tools.
- Regulated Environments: Experience working within highly regulated industries, such as Financial Services or Insurance.
- Application Security Depth: Deep understanding of the secure software development lifecycle (SSDLC), threat modeling, and proactive application resilience strategies.

📌 WAF Security Engineer (Bengaluru)
🏢 Trigent Software
📍 Bengaluru