Network Security Engineer-WAAP

Area(s) of responsibility

Skills: Network Security-WAAP

Experience: 6-10 years

Location: (Bangalore Preferred)/ Mumbai/ Pune/ Noida/ Hyderabad/ Chennai

Key Responsibilities

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manage WAAP platforms, including:

• Web Application Firewall (WAF)

• API Security (discovery, protection, runtime analysis)

• Bot Management

• DDoS Protection (L3–L7)

• Design and deploy WAAP solutions using platforms such as:

• Thales Imperva

• Cloud-native WAFs (Azure, AWS WAF) or equivalent

• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.

• Perform false positive tuning, policy optimization, and rule lifecycle management.

• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.

• Integrate WAAP with:

• SIEM/SOAR platforms

• Identity providers

• Threat intelligence feeds

• Collaborate with application teams to:

• Onboard applications into WAAP platforms

• Perform security assessments and risk reviews

• Ensure minimal performance impact while enforcing strong security controls

• Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).

• Lead WAAP incident response and root cause analysis for application-layer attacks.

• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).

• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).

• Deep understanding of:

• OWASP Top 10 (Web & API)

• Application-layer threats and mitigation techniques

• Hands-on experience in:

• WAF policy creation and tuning

• API security controls (schema validation, authentication enforcement)

• Bot mitigation strategies

• DDoS protection architecture (L3–L7)

• Experience in:

• Traffic analysis (HTTP/HTTPS, TLS inspection)

• Behavioral-based threat detection

• Strong understanding of:

• Secure application architectures (monolith, microservices, APIs)

• DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

• Strong hands-on experience in:

• Firewalls (Fortinet, Palo Alto, Juniper)

• IDS/IPS, VPN, SIEM

• Expertise in:

• Firewall policy design, NAT, routing, inspection, and threat prevention

• Experience in designing secure:

• Hybrid (on-prem + cloud + internet-facing) environments

• Experience in:

• Proxy architectures (forward/reverse)

Secure internet gateways