Hiring For Senior Security Analyst/ Lead (WAF)

Doyen Infosolutions Pvt. Ltd.; Navi Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Doyen Infosolutions Pvt. Ltd. in Navi Mumbai is seeking a security engineer to manage WAF operations, API protection, and threat detection across web and API layers.

You will implement, monitor, and tune security policies, collaborate with development teams for secure onboarding, and support governance, audits, and incident response in a 24x7 rotation.

Qualifications

• Hands-on experience with WAF platforms (Akamai, Cloudflare, Imperva, F5, AWS/Azure/GCP WAF).
• Strong understanding of web protocols (HTTP/S) and API architectures (REST/GraphQL).
• Knowledge about API assessment is a bonus.
• Good understanding of OWASP Top 10 and API Security Top 10.
• Strong knowledge of firewall concepts.

Responsibilities

• WAF Operations: Deploy, configure, and maintain WAF policies.
• Monitor and tune rules to reduce false positives and enhance threat detection.
• Manage features such as bot protection, rate limiting, geo-blocking, and access control.
• Regular policy updates based on new threats and app changes.

Skills

WAF platforms experience

HTTP/S understanding

API architectures REST/GraphQL

OWASP Top 10 knowledge

API Security Top 10 knowledge

Firewall concepts

Log analysis

Communication skills

Problem solving

24x7 shift readiness

Tools

Akamai

Cloudflare

Imperva

F5

AWS WAF

Azure WAF

GCP WAF

Job description

Job Responsibilities:

1. WAF Operations
2. Deploy, configure, and maintain Web Application Firewall (WAF) policies.
3. Monitor and tune rules to reduce false positives and enhance threat detection.
4. Manage features such as bot protection, rate limiting, geo-blocking, and access control.
5. Perform regular policy updates based on new threats and application changes.
6. API Security
7. Implement and maintain API protection policies including schema validation, authentication, and rate limiting.
8. Monitor API traffic for anomalies, abuse patterns, and threat behaviour.
9. Collaborate with development teams to ensure secure API onboarding and lifecycle management.
10. Threat Detection & Response
11. Analyze security events, logs, and alerts related to web and API attacks.
12. Investigate and respond to incidents such as SQL injection, XSS, bot attacks, and DDoS attempts.
13. Generate incident reports and recommend corrective actions.
14. Security Governance & Compliance
15. Ensure WAF and API security implementations align with security standards (OWASP Top 10, API Security Top 10).
16. Support audits, compliance checks, and risk assessments.
17. Document configurations, runbooks, and operational procedures.
18. Collaboration & Support
19. Work with AppSec, DevOps, Development, and Network teams to support deployments.
20. Assist in application onboarding, testing, and change management activities.

Key Skills:

• Hands-on experience with any WAF platform (Akamai, Cloudflare, Imperva, F5, AWS/Azure/GCP WAF).
• Strong understanding of web protocols (HTTP/S), API architectures (REST/GraphQL), and CDN/proxy concepts.
• Knowledge about API assessment will be bonus
• Good understanding of OWASP Top 10 and API Security Top 10.
• Should have strong knowledge of firewall concepts
• Experience in analyzing logs, traffic patterns, and security events.
• Good communication and stakeholder management skills.
• Strong problem-solving and communication skills
• Willingness to work in 24x7 shift rotation