Key Responsibilities :

- Architect, implement, and manage WAAP solutions, including Web Application Firewall (WAF), API Security, Bot Management, and L3 - L7 DDoS Protection.

- Design and deploy WAAP solutions using Thales Imperva, Azure WAF, AWS WAF, or equivalent platforms.

- Develop and maintain custom WAF rules, security policies, and signatures.

- Perform false-positive tuning, policy optimization, and rule lifecycle management.

- Implement API discovery, schema enforcement, and protection against OWASP API Top 10 threats.

- Protect applications against OWASP Top 10 vulnerabilities including SQL Injection, XSS, RCE, etc.

- Integrate WAAP solutions with SIEM/SOAR, Identity Providers, and Threat Intelligence platforms.

- Collaborate with application teams for application onboarding, security assessments, and risk reviews.

- Lead incident response and root-cause analysis for application-layer security attacks.

- Monitor and report application security metrics, attack trends, and mitigation effectiveness.

- Ensure security controls align with NIST, CIS, Zero Trust, and enterprise security standards.

- Design and maintain secure network infrastructure across data center, campus, and cloud environments.

- Conduct security design reviews and support security audits.

- Collaborate with cybersecurity, infrastructure, and application teams globally.

Mandatory Skills :

- 10 - 12 years of experience in Network Security / Cybersecurity.

- Strong hands-on experience with WAAP/WAF technologies.

- Strong experience with Thales Imperva or equivalent WAF/WAAP platforms.

- Strong knowledge of API Security, Bot Management, and DDoS Protection.

- Experience with Azure WAF / AWS WAF or other cloud-native WAF solutions.

- Hands-on experience creating and tuning WAF rules and security policies.

- Strong understanding of OWASP Top 10 and OWASP API Top 10.

- Experience integrating security platforms with SIEM/SOAR and threat intelligence.

- Strong understanding of network security architecture across cloud and data center environments.

- Good knowledge of security frameworks such as NIST, CIS, and Zero Trust.

- Strong incident response, troubleshooting, and root-cause analysis skills.