Roles & Responsibilities

- Provide L2 support for Akamai WAF (Kona Site Defender), including policy tuning, configuration, and troubleshooting.

- Monitor and analyze WAF events, logs, and alerts to detect and mitigate web attacks.

- Handle incident management and escalation to L3 or vendor support when required.

- Onboard new applications and services into the Akamai WAF platform, including ruleset design and deployment.

- Collaborate with application, DevOps, and security teams to validate and optimize protection policies.

- Perform root cause analysis of recurring WAF-related incidents and propose long-term fixes.

- Support change management activities such as policy updates, upgrades, and patching.

- Maintain and update documentation, SOPs, and runbooks for WAF operations.

- Work with compliance and audit teams to ensure WAF security standards are met.

- This is a third-party payroll role through Commedia, sitting at the client location (IDFC Bank).

- The working location is the IDFC office in Airoli, Navi Mumbai.

- The role involves managing network security projects for government and banking sectors.

- Candidates should stay updated with OWASP Top 10, CVEs, and the latest web security threats.

Requirements

Ideal Candidate

- Robust WAF Engineer Profile with hands-on Akamai Kona Site Defender troubleshooting and policy-tuning depth

- Mandatory (Experience 1): Must have 3.5+ years in Network Security / Web Application Security, with hands-on Akamai WAF (Kona Site Defender) experience — policy tuning, configuration, and troubleshooting.

- Mandatory (Experience 2): Must have experience monitoring and analyzing WAF events, logs, and alerts to detect and mitigate web attacks, with strong incident troubleshooting and RCA of recurring WAF incidents.

- Mandatory (Tech skill 1): Must have strong knowledge of OWASP Top 10, web threats, and mitigation techniques (staying current with CVEs), plus proficiency in HTTP/HTTPS, TLS,



DNS, and TCP/IP.

- Mandatory (Tech skill 2): Must have experience in policy configuration, false-positive tuning, and custom rule creation, with familiarity with Akamai Control Center (Luna Portal), API integrations, and a good understanding of CDN, reverse proxy, caching, and load balancing.

- Mandatory (Experience 3): Must have experience onboarding new applications/services into the Akamai WAF platform (ruleset design and deployment), collaborating with application, DevOps, and security teams to validate and optimize protection policies.

- Mandatory (Experience 4): Must have experience handling incident management and escalation to L3 / vendor support, supporting change management (policy updates, upgrades, patching), and maintaining SOPs, runbooks, and documentation.

- Mandatory (Skill): Must have ITIL process knowledge (Incident / Change / Problem Management) and experience working with compliance / audit teams to meet WAF security standards.

- Mandatory (Education): Must have a Bachelor's degree in Computer Science, IT, or a related field.

- Mandatory (Domain): Banking-industry experience preferred; strong candidates with the same technical experience from another industry are acceptable.

- Mandatory (Note): Must be comfortable with a 24/7 NOC rotational shift environment at the client site (IDFC Bank, Airoli, Navi Mumbai), able to work in a fast-paced

- Preferred (Certification): Akamai WAF Certified Professional; other security certifications (CEH, GIAC, etc.).

- Preferred (Other WAFs / Skills): Experience with other WAFs (Cloudflare, AWS WAF, F5 ASM, Imperva, FortiWeb); scripting/automation (Python, Shell, REST APIs); SIEM tools (Splunk, QRadar, ELK) for WAF log analysis; Bot Manager, API Security, or DDoS protection

Experience: 4–7 years · Work from office · 6 days a week · Notice period up to 30 days

Benefits

- Travel expenses and documentation charges provided if traveling to the Mumbai head office for work.

📌 Senior Network Security Engineer (WAF / Akamai) (Navi Mumbai)
🏢 TalentXO
📍 Navi Mumbai