Job Responsibilities:
WAF Operations
Deploy, configure, and maintain Web Application Firewall (WAF) policies.
Monitor and tune rules to reduce false positives and enhance threat detection.
Manage features such as bot protection, rate limiting, geo-blocking, and access control.
Perform regular policy updates based on new threats and application changes.
API Security
Implement and maintain API protection policies including schema validation, authentication, and rate limiting.
Monitor API traffic for anomalies, abuse patterns, and threat behaviour.
Collaborate with development teams to ensure secure API onboarding and lifecycle management.
Threat Detection & Response
Analyze security events, logs, and alerts related to web and API attacks.
Investigate and respond to incidents such as SQL injection, XSS, bot attacks, and DDoS attempts.
Generate incident reports and recommend corrective actions.
Security Governance & Compliance
Ensure WAF and API security implementations align with security standards (OWASP Top 10, API Security Top 10).
Support audits,



compliance checks, and risk assessments.
Document configurations, runbooks, and operational procedures.
Collaboration & Support
Work with AppSec, DevOps, Development, and Network teams to support deployments.
Assist in application onboarding, testing, and change management activities.

Key Skills:
Hands-on experience with any WAF platform (Akamai, Cloudflare, Imperva, F5, AWS/Azure/GCP WAF).
Strong understanding of web protocols (HTTP/S), API architectures (REST/GraphQL), and CDN/proxy concepts.
Knowledge about API assessment will be bonus
Valuable understanding of OWASP Top 10 and API Security Top 10.
Should have solid knowledge of firewall concepts
Experience in analyzing logs, traffic patterns, and security events.
Good communication and stakeholder management skills.
Robust problem-solving and communication skills
Willingness to work in 24x7 shift rotation

📌 Hiring For Senior Security Analyst/ Lead Waf Navi Mumbai
🏢 Doyen Infosolutions
📍 Navi Mumbai