Cloud Native WAF Engineer

Role & responsibilities

Core Skills / Technical Requirements

• Extensive experience in Web Application Security and log analysis, with a strong background in Cyber SOC/CSIRT operations.
• WAF Engineer SME: with any one cloud experience GCP or AWS or Azure.
• Cloud Native WAFs
• AWS WAF
• Azure WAF
• Google Cloud (GCP) WAF
• ModSecurity (ModSec)
• Multi-vendor WAF solutions such as F5 and Akamai
• Hands-on experience with edge, cloud, and on-premises WAF platforms.
• Strong expertise in cloud technologies and native security controls, preferably including AWS, Azure, and GCP.
• Deep understanding of:
• Web application security concepts
• Common attack vectors (OWASP Top 10)
• Security mitigations and best practices
• Proficient in:
• WAF configuration, tuning, and optimisation
• Custom WAF rule development
• Security policy creation and management
• Ability to design and implement bespoke WAF processes, standards, and documentation.
• Experience evaluating and aligning platforms to MVP and Baseline Security Configurations.
• Experience supporting DevSecOps pipelines and security automation initiatives.
• Knowledge of Identity and Access Management (IAM/IDAM) protocols and access control mechanisms for WAF administration.
• Strong understanding of:
• HTTPS inspection
• SSL/TLS termination
• Certificate lifecycle management
• Experience implementing and managing rate-limiting controls and web application protection mechanisms.
• Understanding of WAF version control, upgrades, patching, and change management processes.
• Ability to identify, configure, and document platform logging and monitoring requirements from a security perspective.
• Experience collaborating with SOC teams during WAF-related security incidents and investigations.
• Good understanding of:
• Network connectivity and troubleshooting
• Service management processes
• Infrastructure support environments

Other Skills

• Strong stakeholder and vendor management capabilities.
• Excellent analytical skills with the ability to assess and interpret large datasets.
• Strong written and verbal communication skills.
• Excellent interpersonal and collaboration skills.
• Experience working within Agile environments and understanding Agile principles.
• Previous experience delivering Information Security, Cyber Security, IT Security, Infrastructure, or Transformation projects is highly desirable.

Location : PAN INDIA LTM office