Description

You will lead web application security efforts, focusing on WAF tuning, API protection, and Layer 7 defenses.

This role is on-site.

Responsibilities

• Tune and create WAF signatures and rules across major vendors to block threats.
• Reduce and eliminate false positives within Web Application Firewall configurations.
• Implement Layer 7 protections, including DDoS mitigation, rate limiting, and bot protection.
• Ensure API security aligns with application flow and WAF policies.
• Analyze how DNS, load balancers, and routing interact with security controls.

Required Skills

• 5+ years of hands-on experience with Web Application Firewalls (WAFs).
• Expertise with Akamai, Cloudflare, Imperva, AWS WAF, F5 ASM, and API Security.
• Experience creating and tuning WAF signatures and rules.
• Familiarity with Layer 7 protections, including rate limiting and bot protection.
• Understanding of DNS functionality and its impact on security.
• Awareness of Layer 3 concepts like routing and switching.

Preferred Skills

• Ability to analyze application flow interactions with WAF policies.

Key Skills

Education

Any Graduate