Job Title : WAF Security Engineer / WAF Administrator / WAF DevSecOps Engineer (AKAMAI).

Location : PAN India.

Experience Required : 6+ Years.

Work Mode : Hybrid.

Notice Period : Immediate to 30 Days.

Client :

An Indian multinational technology company based in Bengaluru. It provides information technology, consulting and business process services, and is one of India's Big Six IT services companies.

Key Accountabilities and Responsibilities :

Must :

- WAF solutions for edge, cloud, and on-premises.

- Cloud services and their WAF controls.

- Web Application security attack methods and mitigations.

- WAF tuning and configuration.

- IDAM protocols and access control measures for WAF management.

- HTTPS inspection, including Termination and Certificate management, grounded in robust web security practices.

- Rate limiting techniques.

- Deep knowledge of WAF functionalities and limitations.

- General connectivity / network issue management / service management.

- Proficiency in Continuous Integration and Continuous Deployment tools (Jenkins, CircleCI, Travis CI, GitLab CI, and Bamboo).

- Strong skills in scripting languages such as Python, Bash, PowerShell.

- Infrastructure as Code (IaC) (Terraform, Ansible, Chef, or Puppet).

- API Integration and Management.

- Containerization and Orchestration / Cloud Platforms.

- Monitoring and Logging tools such as Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), or Splunk.

- Networking and Security Fundamentals.

- AWAF or WAF solutions.

- Verbal and written communication skills.

- Manage multiple priorities, commitments and projects.

- Development of custom WAF rules and security testing packages.

- OWASP top 10 vulnerabilities.

- Automate security testing within CI/CD pipelines.

- Enterprise Scale WAF Deployments.

Should :

- Security Practices in DevOps (DevSecOps).

- Agile and Scrum Methodologies.

- Project Management methodologies.

- Web-based attack methodologies (tools such as payloads, exploits, and countermeasures).

- Web application and API security.

Good to have :

- Ethical Hacking.