Security Researcher II (WAF)

Location: Bangalore

Experience: 2 to 4 years

Core Responsibilities:

• Primary role is to work with the Threat Research team focussing on vulnerability research to analyze affected products and trigger conditions for newly released vulnerabilities

• Utilize vulnerability and exploit intel feeds to identify applicable compensating controls and policies to prevent successful exploitation of these CVEs

• Research various WAF products to identify APIs that provides details about attack surface protected, policies applied and the enforcement status of these policies

• Build automation that continuously monitor changes in these policies and APIs of these WAF solutions

• Setup a lab to apply compensating controls and policies to validate whether that can prevent the exploitation of the CVE in question

• Map and review auto generated mapping of CVEs to compensating controls and policies which feeds back to our CTEM product

Essential Skills, Experience and Qualifications:

• M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology

• Must have hands-on experience in working with WAF products (implementation, fine tuning and building automations)

• Strong understanding of HTTP protocol

• Proficiency in Python (or a similar language) and experience working with REST APIs.

• Must have experience in effectively utilizing LLMs for automation engineering and research such as using LLMs to parse advisories, generate mappings, or build agentic workflows

• Contributions to open source tools or published research is nice-to-have

• Able to clearly document technical findings for both research team and customer success team

• Able to work independently with minimum supervision

• Effective communication, and interpersonal skills

Any of the following certifications would be preferred:

• Vendor WAF Certification