Cloud Native WAF Engineer

Role & responsibilities

Core Skills / Technical Requirements

• Extensive experience in Web Application Security and log analysis, with a strong background in Cyber SOC/CSIRT operations.

• WAF Engineer SME: with any one cloud experience GCP or AWS or Azure.

• Cloud Native WAFs

• AWS WAF

• Azure WAF

• Google Cloud (GCP) WAF

• ModSecurity (ModSec)

• Multi-vendor WAF solutions such as F5 and Akamai

• Hands-on experience with edge, cloud, and on-premises WAF platforms.

• Strong expertise in cloud technologies and native security controls, preferably including AWS, Azure, and GCP.

• Deep understanding of:

• Web application security concepts

• Common attack vectors (OWASP Top 10)

• Security mitigations and best practices

• Proficient in:

• WAF configuration, tuning, and optimisation

• Custom WAF rule development

• Security policy creation and management

• Ability to design and implement bespoke WAF processes, standards, and documentation.

• Experience evaluating and aligning platforms to MVP and Baseline Security Configurations.

• Experience supporting DevSecOps pipelines and security automation initiatives.

• Knowledge of Identity and Access Management (IAM/IDAM) protocols and access control mechanisms for WAF administration.

• Strong understanding of:

• HTTPS inspection

• SSL/TLS termination

• Certificate lifecycle management

• Experience implementing and managing rate-limiting controls and web application protection mechanisms.

• Understanding of WAF version control, upgrades, patching, and change management processes.

• Ability to identify, configure, and document platform logging and monitoring requirements from a security perspective.

• Experience collaborating with SOC teams during WAF-related security incidents and investigations.

• Good understanding of:

• Network connectivity and troubleshooting

• Service management processes

• Infrastructure support environments

Other Skills

• Strong stakeholder and vendor management capabilities.
• Excellent analytical skills with the ability to assess and interpret large datasets.
• Strong written and verbal communication skills.
• Excellent interpersonal and collaboration skills.
• Experience working within Agile environments and understanding Agile principles.
• Previous experience delivering Information Security, Cyber Security, IT Security, Infrastructure, or Transformation projects is highly desirable.

Location : PAN INDIA LTM office