Competency:

WAF, Cloudflare, Akamai, F5, Ddos, VPN Years of experience required:

3 - 5 Years:

About the Company: ACPL

We at ACPL are Cyber Security specialists and help corporates with their complete cycle of setting up the Cyber security platform. Right from selecting the adaptable security tools to the deployment of the same and then providing dedicated cybersecurity services.

Established in 1990, ACPL is the developer of India’s first antivirus software “SmartDog”. We offer our services and solutions by integrating complex technologies offered by the leading IT companies through strategic partnerships. Our solutions and services are majorly focused on the most challenging industry verticals like BFSI, Manufacturing, Telecommunication, Retail, Healthcare, IT/ ITES, Power, Media Education, Distribution and more.

We are $70 million company with PAN India presence with services across ASIA and a branch office in Singapore. We are a team of 300+ highly qualified professionals having certifications like CISSP, CISA, GICH etc.

Apart from winning various Industry awards and recognitions ACPL is 100% RBA Compliant and a certified “Great place to work”.

Job Overview

We are seeking a proactive and skilled Application Security Engineer with 3 to 4 years of hands-on experience to join our Information Security team. In this role, you will be responsible for safeguarding our internet-facing applications, APIs, and overall network infrastructure.

You will act as the primary line of defense at the edge, leveraging industry-leading solutions like F5, Cloudflare, and Akamai to protect against web vulnerabilities, automated bot traffic, and volumetric attacks. Additionally, you will manage secure access solutions, including VPNs, to ensure safe, encrypted connectivity for our global workforce.

Key Responsibilities

1. Web Application Firewall (WAF) Management

- F5 Advanced WAF (ASM): Design, deploy, configure, and tune F5 WAF policies to protect web applications against OWASP Top 10 vulnerabilities and zero-day exploits.




- Cloud WAF (Cloudflare & Akamai): Implement and maintain edge security configurations, custom WAF rules, and rate-limiting policies across Cloudflare and Akamai platforms.
- Tuning & Optimization: Continuously monitor WAF logs to identify false positives/negatives, tune security policies to reduce friction for legitimate users, and ensure optimal application performance.

1. DDoS Mitigation & Edge Security

- DDoS Defense: Configure, monitor, and maintain DDoS mitigation strategies at both the network (Layer 3/4) and application (Layer 7) levels using Akamai and Cloudflare.
- Bot Management: Implement Bot management protocols to detect and block malicious scraping, credential stuffing, and automated application attacks.
- CDN Optimization: Manage Content Delivery Network (CDN) settings to balance application performance (caching, routing) with strict security postures.

1. VPN & Secure Access Administration

- VPN Management: Deploy, maintain, and troubleshoot enterprise Virtual Private Network (VPN) solutions (e.g., SSL VPN, IPsec tunnels) for secure remote access.
- Access Control: Assist in the transition from traditional VPNs to Zero Trust Network Access (ZTNA) models using tools like Cloudflare Access or Akamai Enterprise Application Access.
- Encryption & Certificates: Manage SSL/TLS certificates, ensuring strong cryptographic standards and timely renewals across all endpoints and edge gateways.

1. Incident Response & Collaboration

- Threat Monitoring: Analyze security events, traffic patterns, and alerts from WAFs and Edge tools to proactively identify indicators of compromise (IoCs).
- Incident Handling:



Act as the technical responder for ongoing L7 web attacks or volumetric DDoS incidents.
- DevSecOps Integration: Collaborate with development, DevOps, and network teams to onboard current applications securely and ensure security controls are integrated into the deployment pipeline.

Qualifications & Technical Requirements

Experience:

- 3 to 5 years of dedicated experience in Application Security, Network Security, or Edge Security roles.

Technical Skills:

- Core Technologies: Hands-on experience configuring and administering F5 WAF (ASM/Advanced WAF), Cloudflare, and Akamai (Kona Site Defender/Bot Manager).
- DDoS & Network Attacks: Proven experience mitigating Layer 3/4 and Layer 7 Distributed Denial of Service (DDoS) attacks.
- VPNs & Networking: Solid understanding of enterprise VPN architectures (IPSec, SSL/TLS), TCP/IP protocols, DNS architecture, and HTTP/HTTPS traffic flows.
- Web Security Principles: Deep understanding of the OWASP Top 10, secure coding principles, and modern web architectures (REST APIs, Microservices).
- Log Analysis: Familiarity with integrating edge security tools with SIEM platforms (e.g., Splunk, ELK, Datadog) for log aggregation and correlation.

Nice-to-Have (Bonus Skills):

- Experience with Infrastructure as Code (IaC) tools like Terraform or Ansible to automate WAF deployments.
- Scripting skills in Python or Bash for interacting with APIs (e.g., Cloudflare/Akamai APIs).
- Relevant industry certifications (e.g., F5 Certified Technology Specialist, Cloudflare/Akamai certs, CompTIA Security+, CEH, or AWS/Azure Security).

Soft Skills

- Strong analytical and troubleshooting mindset to resolve complex traffic flow and false-positive issues.
- Excellent communication skills, with the ability to explain complex security risks to non-security stakeholders (like product and engineering teams).
- Ability to perform calmly and methodically under pressure during active security incidents or outages.

Designation:

Sr. Solution Engineer

📌 Application Security Engineer (Bengaluru)
🏢 ACPL Systems
📍 Bengaluru