Cloud Native WAF Engineer

LTM; Dadri, Pune District, Bengaluru; Hybrid; INR 1,500,000 - 2,600,000; Full time

Job summary

LTM is seeking a WAF Engineer SME with extensive Web Application Security and log analysis experience. The role covers edge, cloud, and on‑prem WAF platforms, with hands‑on duties in configuring, tuning, and developing custom WAF rules. cloud experience across AWS/Azure/GCP is preferred.

You will collaborate with SOC teams on incidents and help drive secure MVP baselines. The ideal candidate has strong knowledge of OWASP Top 10, IAM concepts, HTTPS/SSL termination, and rate-limiting, and can

Qualifications

• Extensive experience in Web Application Security and log analysis with Cyber SOC/CSIRT background.
• Experience with WAF configuration, tuning and rule development.

Responsibilities

• Lead WAF architecture and security controls across edge, cloud, and on‑prem environments.
• Collaborate with SOC teams during security incidents and investigations.
• Design and document bespoke WAF processes, standards, and logging requirements.

Skills

Web App Security

Log Analysis

Cyber SOC/CSIRT

WAF SME

Cloud: AWS/Azure/GCP

WAF config & tuning

Custom WAF rules

Policy management

DevSecOps support

IAM/IDAM

HTTPS inspection

SSL/TLS termination

Rate limiting

Platform logging & monitoring

SOC collaboration

Education

Bachelor's or relevant field

Tools

F5

Akamai

ModSecurity (ModSec)

Job description

Role & responsibilities

Core Skills / Technical Requirements

• Extensive experience in Web Application Security and log analysis, with a strong background in Cyber SOC/CSIRT operations.
• WAF Engineer SME: with any one cloud experience GCP or AWS or Azure.
• Cloud Native WAFs
• AWS WAF
• Azure WAF
• Google Cloud (GCP) WAF
• ModSecurity (ModSec)
• Multi-vendor WAF solutions such as F5 and Akamai
• Hands‑on experience with edge, cloud, and on‑premises WAF platforms.
• Strong expertise in cloud technologies and native security controls, preferably including AWS, Azure, and GCP.
• Deep understanding of:
• Web application security concepts
• Common attack vectors (OWASP Top 10)
• Security mitigations and best practices
• Proficient in:
• WAF configuration, tuning, and optimisation
• Custom WAF rule development
• Security policy creation and management
• Ability to design and implement bespoke WAF processes, standards, and documentation.
• Experience evaluating and aligning platforms to MVP and Baseline Security Configurations.
• Experience supporting DevSecOps pipelines and security automation initiatives.
• Knowledge of Identity and Access Management (IAM/IDAM) protocols and access control mechanisms for WAF administration.
• Strong understanding of:
• HTTPS inspection
• SSL/TLS termination
• Certificate lifecycle management
• Experience implementing and managing rate-limiting controls and web application protection mechanisms.
• Understanding of WAF version control, upgrades, patching, and change management processes.
• Ability to identify, configure, and document platform logging and monitoring requirements from a security perspective.
• Experience collaborating with SOC teams during WAF‑related security incidents and investigations.
• Good understanding of:
• Network connectivity and troubleshooting
• Service management processes
• Infrastructure support environments

Other Skills

• Strong stakeholder and vendor management capabilities.
• Excellent analytical skills with the ability to assess and interpret large datasets.
• Strong written and verbal communication skills.
• Excellent interpersonal and collaboration skills.
• Experience working within Agile environments and understanding Agile principles.
• Previous experience delivering Information Security, Cyber Security, IT Security, Infrastructure, or Transformation projects is highly desirable.

Location

PAN INDIA LTM office