Job Responsibilities:

1. WAF Operations

2. Deploy, configure, and maintain Web Application Firewall (WAF) policies.

3. Monitor and tune rules to reduce false positives and enhance threat detection.

4. Manage features such as bot protection, rate limiting, geo-blocking, and access control.

5. Perform regular policy updates based on new threats and application changes.

6. API Security

7. Implement and maintain API protection policies including schema validation, authentication, and rate limiting.

8. Monitor API traffic for anomalies, abuse patterns, and threat behaviour.

9. Collaborate with development teams to ensure secure API onboarding and lifecycle management.

10. Threat Detection & Response

11. Analyze security events, logs, and alerts related to web and API attacks.

12. Investigate and respond to incidents such as SQL injection, XSS, bot attacks, and DDoS attempts.

13. Generate incident reports and recommend corrective actions.

14. Security Governance & Compliance

15. Ensure WAF and API security implementations align with security standards (OWASP Top 10, API Security Top 10).

16.



Support audits, compliance checks, and risk assessments.

17. Document configurations, runbooks, and operational procedures.

18. Collaboration & Support

19. Work with AppSec, DevOps, Development, and Network teams to support deployments.

20. Assist in application onboarding, testing, and change management activities.

Key Skills:

- Hands-on experience with any WAF platform (Akamai, Cloudflare, Imperva, F5, AWS/Azure/GCP WAF).

- Strong understanding of web protocols (HTTP/S), API architectures (REST/GraphQL), and CDN/proxy concepts.

- Knowledge about API assessment will be bonus

- Good understanding of OWASP Top 10 and API Security Top 10.

- Should have strong knowledge of firewall concepts

- Experience in analyzing logs, traffic patterns, and security events.

- Good communication and stakeholder management skills.

- Robust problem-solving and communication skills

- Willingness to work in 24x7 shift rotation

📌 Hiring For Senior Security Analyst/ Lead (WAF) (Navi Mumbai)
🏢 Doyen Infosolutions
📍 Navi Mumbai