Web Application firewall

7+ years of experience in Information, Application, Network, Cloud, or Infrastructure Security.

Hands-on knowledge of WAF implementation, policy configuration, rule tuning, alert analysis, false-positive handling, and enforcement.

Strong understanding of DNS, HTTP/HTTPS, TLS, reverse proxies, load balancers, CDNs, API gateways, and traffic routing.

Working knowledge of OWASP Top 10, injection, XSS, authentication/access control issues, bots, and DDoS risks.

Familiarity with cloud security and WAF solutions such as AWS WAF, Azure WAF, Google Cloud Armor, Akamai, Cloudflare, F5, or Imperva.

Experience across on-prem, hybrid, cloud, SaaS, containerized, and API environments.

Experience coordinating security implementations across application, network, cloud, infrastructure, DNS, vendor, and business teams.

Knowledge of change management, cutover/rollback planning, testing, validation, and post-production monitoring.

Ability to review architecture diagrams, traffic flows, DNS records, certificates, WAF logs, and implementation evidence.

Experience with ServiceNow, Jira, Confluence, SharePoint, or similar tools.

Ability to maintain trackers, dashboards, risk logs, test plans, status reports, and implementation documentation.

Strong stakeholder, program management, and cross-functional collaboration skills.

Excellent communication skills with technical and non-technical stakeholders.

Strong ownership, organization, problem-solving, and influencing abilities.

Ability to manage multiple WAF implementations, dependencies, risks, and escalations.

Experience with CDN, DDoS, bot management, API security, and edge security.

Familiarity with Terraform, IaC, TLS certificate management, WAF log analysis, and security monitoring.

Relevant certifications: Security+, AWS/Azure Security, CCSP, CCSK, CISSP, or equivalent.

Experience in regulated industries such as banking, financial services, healthcare, or insurance.