We are looking for an experienced WAF Engineer with strong hands-on expertise in Web Application Firewall (WAF), Load Balancers, Global Load Balancers (GLB), application-layer security, threat analysis, L7 DDo S protection, SQL Injection and BOT management.
The candidate will be responsible for designing, implementing, monitoring, troubleshooting, and tuning application security and traffic-management solutions across enterprise environments.
Key Responsibilities
Design, configure, implement, and manage WAF, Load Balancer and Global Load Balancer solutions. Configure and maintain WAF security policies, rules, signatures, exceptions, and custom security controls. Analyze and mitigate application-layer attacks including SQL Injection, Cross-Site Scripting (XSS), OWASP Top 10 attacks, HTTP/HTTPS-based attacks, Application-layer DDo S / L7 Do S, Malicious and automated BOT traffic Perform threat analysis and investigate suspicious application traffic and security events. Analyze WAF logs, HTTP/HTTPS traffic, attack patterns, and security alerts to identify threats and false positives. Develop and fine-tune WAF policies to balance security and application availability. Configure BOT protection / BOT management policies to identify and mitigate malicious automated traffic. Implement and manage L7 DDo S protection mechanisms and mitigation strategies. Work on Global Load Balancing concepts such as DNS-based traffic distribution, geographic load balancing, application availability, and disaster recovery. Troubleshoot application connectivity, performance, SSL/TLS, routing, and load-balancing issues. Collaborate with network, security, application, and infrastructure teams for incident resolution. Participate in security incident investigation, RCA, and remediation activities. Monitor system performance, capacity, availability, and security posture. Prepare technical documentation, operational procedures, and incident reports.Candidate Profile
Strong understanding of application security and Layer 7 traffic management. Hands-on experience in WAF policy implementation and tuning. Good analytical and troubleshooting skills for identifying application and security-related issues. Ability to analyze attack signatures, HTTP requests, headers, URLs, parameters, and payloads. Experience handling security incidents involving SQL Injection, BOT attacks, L7 Do S/DDo S and malicious web traffic. Good communication and coordination skills.This listing is sourced from a third-party job board. Applying will redirect you to the original posting.