Network Security Engineer - Web Application and API Protection

Birlasoft Limited; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Birlasoft Limited is seeking a Network Security Engineer specialized in WAAP to architect, implement, and manage WAAP platforms across multiple locations in India. The role focuses on WAF, API security, bot management, and DDoS protection, with hands-on policy creation and threat mitigation.

The candidate will collaborate with application teams to onboard apps, enforce OWASP Top 10 protections, and drive incident response and risk reviews in a CI/CD environment.

Qualifications

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
• Deep understanding of OWASP Top 10 web and API threats and mitigations.
• Hands-on in WAF policy creation and tuning, API security controls, and bot mitigation.
• Experience in DDoS protection architecture and traffic analysis (HTTP/HTTPS, TLS inspection).
• Knowledge of secure application architectures (monolith, microservices, APIs) and DevSecOps integration.

Responsibilities

• Architect, implement, and manage WAAP platforms (WAF, API security, bot management).
• Develop and maintain WAAP rules, policies, and signatures to protect critical applications.
• Tune false positives, optimize policies, and manage rule lifecycles.
• Enable API discovery and protection against OWASP API Top 10 threats.
• Integrate WAAP with SIEM/SOAR, identity providers, and threat feeds.
• Collaborate with application teams to onboard apps and assess risks.
• Lead incident response for application-layer attacks and measure mitigation effectiveness.
• Ensure compliance with CIS, NIST, Zero Trust, and data protection standards.

Skills

WAAP platforms

WAF policy tuning

API security controls

Bot mitigation

DDoS protection

Security incident response

Threat intelligence feeds

DevSecOps integration

Traffic analysis

Tools

Akamai WAAP

Imperva Cloud WAF

Azure WAF

AWS WAF

Job description

Network Security Engineer-WAAP

Area(s) of responsibility Skills: Network Security-WAAP Experience: 6-10 years Location: (Bangalore Preferred)/ Mumbai/ Pune/ Noida/ Hyderabad/ Chennai

Key Responsibilities

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manage WAAP platforms , including:
• Web Application Firewall (WAF)
• API Security (discovery, protection, runtime analysis)
• Bot Management
• DDoS Protection (L3-L7)
• Design and deploy WAAP solutions using platforms such as: Thales Imperva Cloud-native WAFs (Azure, AWS WAF) or equivalent
• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
• Perform false positive tuning, policy optimization, and rule lifecycle management .
• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats .
• Integrate WAAP with: SIEM/SOAR platforms Identity providers Threat intelligence feeds
• Collaborate with application teams to: Onboard applications into WAAP platforms Perform security assessments and risk reviews Ensure minimal performance impact while enforcing strong security controls Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
• Lead WAAP incident response and root cause analysis for application-layer attacks.
• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).
• Deep understanding of: OWASP Top 10 (Web & API) Application-layer threats and mitigation techniques
• Hands-on experience in: WAF policy creation and tuning API security controls (schema validation, authentication enforcement) Bot mitigation strategies DDoS protection architecture (L3-L7)
• Experience in: Traffic analysis (HTTP/HTTPS, TLS inspection) Behavioral-based threat detection
• Strong understanding of: Secure application architectures (monolith, microservices, APIs) DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

• Strong hands-on experience in: Firewalls (Fortinet, Palo Alto, Juniper) IDS/IPS, VPN, SIEM
• Expertise in: Firewall policy design, NAT, routing, inspection, and threat prevention
• Experience in designing secure: Hybrid (on-prem + cloud + internet-facing) environments
• Experience in: Proxy architectures (forward/reverse) Secure internet gateways

Experience Level Senior Level