{"id":2274804,"url":"https://alion.io/job/the-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer","title":"IND Lead Engineer, Security - Web Application and API Protection Security Engineer","company":{"id":1760358,"name":"The Hartford","domain":"thehartford.com","url":"https://alion.io/company/thehartford-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":29,"ghost_share":0,"stale_share":0.724,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":50000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GraphQL","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SOAP","optional":false}],"status":"live","first_seen_at":"2026-10-07T00:00:00Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-29T19:51:07Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":22},"description":"IND Lead Engineer, Security - GCC041We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals - and to help others accomplish theirs, too. Join our team as we help shape the future.\nJob Posting: Web Application and API Protection (WAAP) Engineer\nOverview\nWe are seeking a highly skilled Web Application and API Protection (WAAP) Engineer to join our Information Security team. This role is responsible for designing, implementing, and managing enterprise-scale protections for web applications and APIs. The ideal candidate will have deep expertise in web application security, API security, web application firewalls (WAF), bot mitigation, DoS protection, and modern cloud-native security architectures.\nAs a WAAP Engineer, you will work closely with application development, cloud engineering, network security, and cybersecurity teams to protect critical business services from evolving threats while enabling secure digital innovation.\nKey Responsibilities\nProvide operational support and maintenance for The Hartford’s enterprise WAF and API security platforms\nDesign, deploy, and maintain WAAP solutions includingThreat Detection and Prevention\nVulnerability Detection and Prevention\nBot Management and Account Protection\nDoS mitigation technologies\n\nDevelop and manage security policies to protect web applications, mobile applications, and APIs from OWASP Top 10 and OWASP API Top 10 threats\nMonitor, analyze, and respond to application-layer attacks, malicious bot activity, and API abuse\nConduct rule tuning, false-positive analysis, and security policy optimization\nSupport cloud-native WAAP deployments across environments such as AWS, Azure, GCP\nCreate dashboards, metrics, and reports demonstrating security posture, attack trends, and risk reduction\nStay current on emerging web, API, and application security threats, vulnerabilities, and industry best practices\nParticipate in security incident response activities involving web applications and APIs\nRequired Qualifications\nBachelor's degree in Information Security, Computer Science, Cybersecurity, or related field (or equivalent experience)\n3+ years of experience in application security, web security, network security, or a related cybersecurity role\nHands-on experience with WAAP technologies such asAkamai WAF & API Security\nApigee API Management\nAWS WAF\nGoogle Cloud Armor\n\nStrong understanding ofOWASP Top 10\nOWASP API Security Top 10\nAuthentication and Authorization (OAuth2, OIDC, SAML)\nREST, GraphQL, and SOAP APIs\nTLS/SSL\nSPA, MPA and Web Application architectures\n\nExperience with API discovery, API inventory management, and API security monitoring\nExperience with SIEM, security monitoring, and log analysis platforms\nPreferred Qualifications\nExperience implementing enterprise WAF and API security programs\nKnowledge of Secure Software Development Lifecycle (SSDLC) practices\nIndustry certifications such as:CISSP\nAWS Certified Security Specialty\n\nAbout Us | Our Culture | What It’s Like to Work Here","description_format":"text","description_chars":3118,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Application Security","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-11T08:49:16Z"},{"event":"close","at":"2026-10-19T22:59:04Z"},{"event":"reopen","at":"2026-10-23T08:51:15Z"}],"visa":[],"liveness":{"score":44,"band":"fade","label":"Fading","p_open":1,"p_active":0.588,"p_room":0.75,"age_days":22,"expected_fill_days":30,"reasons":["conf:9","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/the-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer","json_url":"https://alion.io/job/the-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer.json","meta":{"generated_at":"2026-10-29T22:47:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33720,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1760358},"rest":"https://alion.io/mcp/rest/get_company?id=1760358"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-hartford-ind-lead-engineer-security-web-application-and-api-protection-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2274804}},{"tool":"search_jobs","arguments":{"company":"thehartford.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2274804},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}