Job Title : WAF Security Engineer / WAF Administrator / WAF DevSecOps Engineer (AKAMAI)

Location City : PAN India

Experience Required : 6+ Years

Work Mode : Hybrid

Position Type : Permanent

Notice Period : Immediate to 30 Days

Company Name : VARITE INDIA PRIVATE LIMITED

Client :

An Indian multinational technology company based in Bengaluru. It provides information technology, consulting and business process services, and is one of India's Big Six IT services companies.

Key Accountabilities and Responsibilities :

Must :

- WAF solutions for edge, cloud, and on-premises

- Cloud services and their WAF controls

- Web Application security attack methods and mitigations

- WAF tuning and configuration

- IDAM protocols and access control measures for WAF management

- HTTPS inspection, including Termination and Certificate management, grounded in robust web security practices

- Rate limiting techniques

- Deep knowledge of WAF functionalities and limitations

- General connectivity / network issue management / service management

- Proficiency in Continuous Integration and Continuous Deployment tools (Jenkins, CircleCI, Travis CI, GitLab CI, and Bamboo)

- Strong skills in scripting languages such as Python, Bash, PowerShell

- Infrastructure as Code (IaC) (Terraform, Ansible, Chef, or Puppet)

- API Integration and Management

- Containerization and Orchestration / Cloud Platforms

- Monitoring and Logging tools such as Prometheus, Grafana, ELK Stack (Elasticsearch, Logstash, Kibana), or Splunk

- Networking and Security Fundamentals

- AWAF or WAF solutions

- Verbal and written communication skills

- Manage multiple priorities, commitments and projects

- Development of custom WAF rules and security testing packages

- OWASP top 10 vulnerabilities

- Automate security testing within CI/CD pipelines

- Enterprise Scale WAF Deployments

Should :

- Security Practices in DevOps (DevSecOps)

- Agile and Scrum Methodologies

- Project Management methodologies

- Web-based attack methodologies (tools such as payloads, exploits, and countermeasures)

- Web application and API security

Good to have :

- Ethical Hacking