Network Security Architect With WAAP

Birlasoft; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Birlasoft in Bangalore is seeking an experienced WAAP & Application Security Specialist to architect and manage WAAP platforms. You will implement WAF, API security, bot management, and DDoS protection, ensuring strong security with minimal performance impact.

Ideal candidates have deep OWASP Top 10 knowledge, hands-on WAF policy tuning, and experience integrating WAAP with SIEM/SOAR, identity providers, and threat feeds for secure application ecosystems.

Qualifications

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent).
• Deep understanding of OWASP Top 10 (Web & API) and application‑layer threats.
• Hands‑on in WAF policy creation, tuning, API security controls, and bot mitigation.
• DDoS protection architecture and traffic analysis including TLS inspection.
• Experience integrating WAAP with SIEM/SOAR, identity providers, and threat feeds.
• Ability to onboard applications, conduct security assessments, and review risk.

Responsibilities

• Architect, implement, and manage WAAP platforms (WAF, API security, bot management, DDoS protection).
• Design and deploy WAAP solutions on Thales Imperva or cloud WAFs (Azure/AWS).
• Develop and maintain custom WAF rules, security policies, and signatures.
• Tune false positives, optimize policies, and manage rule lifecycles.
• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
• Integrate WAAP with SIEM/SOAR, identity providers, and threat intelligence feeds.
• Collaborate with app teams to onboard apps and perform security assessments.
• Ensure minimal performance impact while enforcing strong security controls.
• Implement protection against OWASP Top 10 vulnerabilities (Sqli, XSS, RCE, etc.).
• Lead WAAP incident response and root cause analysis for application‑layer attacks.
• Define and track application security metrics and KPIs.

Skills

WAAP platforms

OWASP Top 10

API security controls

Bot mitigation

DDoS protection

WAF policy tuning

Threat intelligence

SIEM/SOAR integration

Tools

Thales Imperva

Azure WAF

AWS WAF

Cloud WAFs

CI/CD security

Job description

Job Description:

Area(s) of responsibility

Skills: Network Security-WAAP

Experience: 8-11 years

Location: Bangalore Only

Key Responsibilities

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manageWAAP platforms, including:
  • Web Application Firewall (WAF)
  • API Security (discovery, protection, runtime analysis)
  • Bot Management
  • DDoS Protection (L3-L7)
• Design and deploy WAAP solutions using platforms such as:
  • Thales Imperva
  • Cloud-native WAFs (Azure, AWS WAF) or equivalent
• Develop and maintaincustom WAF rules, security policies, and signaturesto protect critical applications.
• Performfalse positive tuning, policy optimization, and rule lifecycle management.
• EnableAPI discovery, schema enforcement, and protection against OWASP API Top 10 threats.
• Integrate WAAP with:
  • SIEM/SOAR platforms
  • Identity providers
  • Threat intelligence feeds
• Collaborate with application teams to:
  • Onboard applications into WAAP platforms
  • Performsecurity assessments and risk reviews
  • Ensure minimal performance impact while enforcing strong security controls
• Implement protection againstOWASP Top 10 vulnerabilities(SQLi, XSS, RCE, etc.).
• LeadWAAP incident responseand root cause analysis for application-layer attacks.
• Define and trackapplication security metrics and KPIs(attack trends, mitigation effectiveness).
• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

• Strong experience withWAAP platforms(Akamai preferred; Cloud WAF or equivalent accepted).
• Deep understanding of:
  • OWASP Top 10 (Web & API)
  • Application-layer threats and mitigation techniques
• Hands-on experience in:
  • WAF policy creation and tuning
  • API security controls (schema validation, authentication enforcement)
  • Bot mitigation strategies
  • DDoS protection architecture (L3-L7)
• Experience in:
  • Traffic analysis (HTTP/HTTPS, TLS inspection)
  • Behavioral-based threat detection
• Strong understanding of:
  • Secure application architectures (monolith, microservices, APIs)
  • DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

• Strong hands-on experience in:
  • Firewalls (Fortinet, Palo Alto, Juniper)
  • IDS/IPS, VPN, SIEM
• Expertise in:
  • Firewall policy design, NAT, routing, inspection, and threat prevention
• Experience in designing secure:
  • Hybrid (on-prem + cloud + internet-facing) environments
• Experience in:
  • Proxy architectures (forward/reverse)

Requirements