Work Requirements:

WFO 3 to 5 Days in a week.

Notice Period: Immediate or 15 Days only.

We are seeking an experienced Senior WAAP (Web Application & API Protection) Security Engineer to design, implement, and manage enterprise-grade WAAP solutions that safeguard web applications, APIs, and digital assets. The ideal candidate will have extensive expertise in WAF, API Security, Bot Management, DDoS Protection, and cloud security, with a strong focus on delivering scalable and resilient security architectures across global enterprise environments.

Key Responsibilities:

- Design, implement, and manage WAAP solutions, including Web Application Firewall (WAF), API Security, Bot Management, and DDoS Protection.

- Configure and optimize WAAP platforms such as Thales Imperva, Akamai, and cloud-native WAF solutions.

- Develop and maintain custom WAF rules, signatures, and security policies to protect enterprise applications.

- Perform API discovery, classification, and security policy enforcement.

- Integrate WAAP solutions with SIEM platforms, identity providers, and threat intelligence feeds.

- Lead incident response activities related to web application and API security threats.

- Conduct security architecture reviews and ensure compliance with industry standards and security frameworks.

- Collaborate with cybersecurity, infrastructure, and application teams to strengthen the organization's security posture.

- Monitor, analyze, and respond to emerging web application threats and vulnerabilities.

- Support audits, risk assessments, and continuous improvement of enterprise security controls.

Required Skills & Qualifications:

- 10+ years of experience in Network Security and Application Security.

- Hands-on experience with WAAP platforms such as Akamai WAAP, Thales Imperva WAF, and Cloud-native WAFs (AWS WAF, Azure WAF, Google Cloud Armor).

- Strong understanding of Web Application Firewall (WAF), API Security, Bot Management, DDoS Protection, and OWASP Top 10 vulnerabilities.

- Experience creating and tuning WAF security policies and custom rules.

- Strong knowledge of Firewalls, IDS/IPS, VPN Technologies, SIEM Platforms, and Secure Proxy Architectures.

- Experience securing cloud environments across AWS, Azure, and GCP.

- Excellent troubleshooting, analytical, and incident response skills.

- Strong communication and stakeholder management abilities.

Preferred Qualifications:

- Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.

- Industry certifications such as CCNP / CCIE, JNCIE, CISSP, CISM, Akamai Certified Professional, and AWS Certified Security - Specialty.

- Experience working in large-scale global enterprise environments and implementing defense-in-depth security strategies.