Web application security Engineer

Job Summary

We are looking for an experienced WAF & Application Security Subject Matter Expert (SME) to strengthen web application and API security across multiple applications and platforms. The role focuses on WAF engineering, advanced rule development, efficacy testing, policy tuning, false-positive mitigation, and security posture enhancement.The role 

This role will play a critical role in enhancing our Web Application Firewall (WAF) across multiple solutions and applications and will be pivotal in crafting, testing, and implementing advanced WAF uplifts. 

This role involves a strong focus on WAF Effiacy and security posture uplift by crafting efficacy testing custom rules and configurations; additionally, the role will cover WAF tuning via detailed log analysis, false positive detection and mitigation, and making tuning and configuration recommendations. The ideal candidate will have experience in SOC or CSIRT and AppSec or Ethical Hacking for in-depth log analysis and have previously worked with at least three major WAF vendors such as Akamai, F5, AWS, GCP, etc.

The successful candidate will help defend the organization and its customers from web-based attacks that could cause substantial harm to the company's operations, reputation, and customers and monitor and review tuning request, proactively assist with identifying false positives and provide expert recommendations and stay updated with the latest web security threats and trends to ensure optimal protection

Skills

Web application security, Firewall