Cyber Security Engineer - WAF

Meta Infotech; Mumbai; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Meta Infotech is seeking a skilled security engineer to implement and manage F5/Imperva WAF solutions, configure policies, and integrate protection into existing infrastructure. You will collaborate with IT and development teams to strengthen web application security.

Responsibilities include monitoring WAF logs, incident response for web attacks, regular security audits, and reporting for compliance. The role requires 5+ years in WAF deployment and a strong understanding of OWASP Top Ten.

Qualifications

• Bachelor's degree in Computer Science, Information Security or related field.
• Proven experience implementing and managing WAF solutions.
• In-depth knowledge of web application security concepts and best practices.
• Strong understanding of OWASP Top Ten and other common web app vulnerabilities.
• Experience with scripting languages (Python, Bash) for automation tasks.

Responsibilities

• Deploy and configure F5/Imperva WAF solutions to protect web applications.
• Collaborate with IT and development teams to integrate WAF into existing infrastructure.

Skills

WAF configuration

Python scripting

Security incident response

OWASP Top Ten knowledge

Team collaboration

Education

Bachelor's degree in Computer Science, Information Security

Tools

F5

Imperva

IDS/IPS

Job description

Role & responsibilities

1. Implementation and Configuration:

• Deploy and configure F5/Imperva Web Application Firewall (WAF) solutions to protect web applications from various cyber threats.
• Collaborate with the IT and development teams to integrate WAF into the existing infrastructure seamlessly.

2. Policy Management:

• Develop and maintain security policies within WAF to ensure the protection of web applications according to organizational security standards.
• Regularly review and update security policies based on emerging threats and vulnerabilities.

3. Incident Response:

• Monitor and analyse WAF logs to detect and respond to security incidents promptly.
• Investigate and mitigate security incidents related to web application attacks.

4. Security Auditing and Compliance:

• Conduct regular security audits to ensure compliance with industry standards and regulatory requirements.
• Provide documentation and reports for compliance purposes.

5. Collaboration:

• Work closely with cross-functional teams, including network security, system administrators, and developers, to enhance overall security posture.
• Participate in security discussions and contribute to the development of security strategies.

Preferred candidate profile

Qualifications:

• - Bachelor's degree in Computer Science, Information Security, or a related field.
• - Proven experience in implementing and managing WAF solutions.
• - In-depth knowledge of web application security concepts and best practices.
• - Strong understanding of OWASP Top Ten and other common web application vulnerabilities.
• - Experience with scripting languages (e.g., Python, Bash) for automation tasks.
• - Relevant certifications such as Certified Secure Sphere Engineer are a plus.

Skills:

• - Proficient in configuring and managing WAF.
• - Strong analytical and problem-solving skills.
• - Excellent communication and interpersonal skills.
• - Ability to work independently and collaboratively in a team.
• - Familiarity with other security technologies such as IDS/IPS is beneficial.

Experience:

• - Minimum of 5 years of experience in implementing and managing F5/Imperva WAF.
• - Experience with incident response and handling web application security incidents.