Network Security Architect - WAAP Specialist

Birlasoft Limited; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Birlasoft Limited in Bangalore is seeking a Network Security Architect with WAAP to design, implement, and manage WAAP platforms including WAF, API security, and bot management across cloud and on-prem environments.

The role emphasizes securing applications with OWASP Top 10 controls, integrating WAAP with SIEM/SOAR, and collaborating with application teams to minimize performance impact while enforcing strong security.

Qualifications

• Hands-on WAAP deployment and policy tuning.

Responsibilities

• Architect, implement and manage WAAP platforms.
• Develop and tune WAAP policies and signatures.
• Enable API discovery, schema enforcement, and protection.
• Collaborate with application teams for secure onboarding and risk reviews.

Skills

WAAP

Job description

Network Security Architect with WAAP Area(s) of responsibility

Skills: Network Security-WAAP

Experience: 8-11 years

Location: Bangalore

Only Key Responsibilities

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manage WAAP platforms , including:
  • Web Application Firewall (WAF)
  • API Security (discovery, protection, runtime analysis)
  • Bot Management
  • DDoS Protection (L3-L7)
• Design and deploy WAAP solutions using platforms such as: Thales Imperva Cloud-native WAFs (Azure, AWS WAF) or equivalent
• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
• Perform false positive tuning, policy optimization, and rule lifecycle management.
• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
• Integrate WAAP with:
  • SIEM/SOAR platforms
  • Identity providers
  • Threat intelligence feeds
• Collaborate with application teams to:
  • Onboard applications into WAAP platforms
  • Perform security assessments and risk reviews
  • Ensure minimal performance impact while enforcing strong security controls
  • Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
• Lead WAAP incident response and root cause analysis for application-layer attacks.
• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
• Deep understanding of: OWASP Top 10 (Web & API) Application-layer threats and mitigation techniques Hands-on experience in: WAF policy creation and tuning API security controls (schema validation, authentication enforcement) Bot mitigation strategies DDoS protection architecture (L3-L7).
• Experience in: Traffic analysis (HTTP/HTTPS, TLS inspection) Behavioral-based threat detection.
• Strong understanding of: Secure application architectures (monolith, microservices, APIs) DevSecOps integration and CI/CD security controls (nice to have).
• Network Security & Infrastructure Strong hands-on experience in: Firewalls (Fortinet, Palo Alto, Juniper) IDS/IPS, VPN, SIEM Expertise in: Firewall policy design, NAT, routing, inspection, and threat prevention Experience in designing secure: Hybrid (on-prem + cloud + internet-facing) environments Experience in: Proxy architectures (forward/reverse) Experience Level Senior Level.