Web Application firewall

WAF – Web Application FirewallTechnical Skills

• 7+ years of experience in Information, Application, Network, Cloud, or Infrastructure Security.
• Hands-on knowledge of WAF implementation, policy configuration, rule tuning, alert analysis, false-positive handling, and enforcement.
• Strong understanding of DNS, HTTP/HTTPS, TLS, reverse proxies, load balancers, CDNs, API gateways, and traffic routing.
• Working knowledge of OWASP Top 10, injection, XSS, authentication/access control issues, bots, and DDoS risks.
• Familiarity with cloud security and WAF solutions such as AWS WAF, Azure WAF, Google Cloud Armor, Akamai, Cloudflare, F5, or Imperva.
• Experience across on-prem, hybrid, cloud, SaaS, containerized, and API environments.
• Experience coordinating security implementations across application, network, cloud, infrastructure, DNS, vendor, and business teams.
• Knowledge of change management, cutover/rollback planning, testing, validation, and post-production monitoring.
• Ability to review architecture diagrams, traffic flows, DNS records, certificates, WAF logs, and implementation evidence.
• Experience with ServiceNow, Jira, Confluence, SharePoint, or similar tools.
• Ability to maintain trackers, dashboards, risk logs, test plans, status reports, and implementation documentation.

Soft Skills

• Strong stakeholder, program management, and cross-functional collaboration skills.
• Excellent communication skills with technical and non-technical stakeholders.
• Strong ownership, organization, problem-solving, and influencing abilities.
• Ability to manage multiple WAF implementations, dependencies, risks, and escalations.

Good to Have

• Experience with CDN, DDoS, bot management, API security, and edge security.
• Familiarity with Terraform, IaC, TLS certificate management, WAF log analysis, and security monitoring.
• Relevant certifications: Security+, AWS/Azure Security, CCSP, CCSK, CISSP, or equivalent.
• Experience in regulated industries such as banking, financial services, healthcare, or insurance.