Description

Provide subject matter expertise and technical leadership on Web Application and API Protection (WAAP) technologies, architectures, and security controls.

Design, deploy, manage, and optimize Web Application Firewall (WAF) and WAAP solutions across large-scale enterprise environments.

Lead the assessment and mitigation of web application and API security risks, ensuring protection against OWASP Top 10 and emerging threats.

Develop and implement secure API protection strategies, including OAuth, token-based authentication, API gateway security, and API hardening.

Support the implementation of automated protection mechanisms by integrating vulnerability scanning tools with WAF platforms.

Collaborate with cybersecurity, network, cloud, and application teams to design secure solutions that align with organizational security standards.

Provide expertise on application-layer security controls, ensuring effective protection against cyber threats and vulnerabilities.

Drive and support security projects and initiatives from planning through successful delivery, taking ownership of assigned engagements.

Act as a technical advisor to stakeholders, project teams, and management on WAAP-related technologies, risks, and best practices.

Mentor and coach junior engineers and team members, providing guidance, technical oversight, and knowledge sharing.

Work closely with the Head of WAAP & DDoS and Network Security leadership, escalating risks and providing regular project updates.

Contribute to the enhancement of security standards, policies, procedures, and architectural frameworks.

Support investigations, troubleshooting, and resolution of complex security issues impacting web applications and APIs.

Evaluate emerging WAAP, WAF, DDoS,



and cloud security technologies and recommend improvements to strengthen the security posture.

Collaborate across global teams and stakeholders to ensure consistent and effective security controls across enterprise environments.

Lead discussions with technical and business stakeholders, influencing decisions and driving security improvements without direct authority.

Enable Skills-Based Hiring No ECMS REQ IDAdditional Details

- ECMS REQ ID : 582879
- Project Location 1 : TELANGANA | HYDERABAD
- Project Location 2 : MAH | PUNE
- Project Location 3 : KRNK | BANGALORE
- Project Location 4 : (No Value)
- Delivery SPOC : [email protected]
- Relevant Experience : Above 8 years
- Mandatory skills : Web Application & API Protection (WAAP)Web Application Firewall (WAF) Design, Deployment & OperationsAPI Security (OAuth, Token-based Authentication, API Gateway Security)OWASP Top 10, Core Rule Set (CRS), Web Application VulnerabilitiesApplication Security Threats & Risk ManagementCloud Security & Network Security ControlsVulnerability Scanning Integration with WAFSecurity Architecture & Security EngineeringStakeholder Management & Technical LeadershipLarge-scale Enterprise Security Solutions
- Desired skills : DDoS MitigationContent FilteringLoad BalancingNetwork Access Control (NAC)Network SegmentationCISSP / CISM / CISA / CCNA / CCIE CertificationsPython / Perl ScriptingCloud SecuritySIEM & Security OperationsIncident Response
- Domain (Industry) : Banking
- BGC (Before onboarding / After onboarding) : HybridOB
- Total Experience (Ex. 5-7 Years) : Above 8 years
- BGC Details : NA
- BGC Vendor : NA
- Mode of Interview : Face to Face
- WFO / WFH / Hybrid : Hybrid
- Please enter shift timings : General / UK shift
- Shift Timings : Others

📌 ECMSRQ# 582879_CYBERSEC_Principal SME for Web And API Protection (WAAP)_ India
🏢 Trigent Software
📍 India