Security Engineer WAF and SSLO (L2)

NTT DATA BUSINESS SOLUTIONS; Mumbai; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS in Mumbai seeks an experienced L2 WAF SSLO Engineer to support, administer, and maintain the bank's Web Application Firewall and SSL Orchestrator platforms. The role focuses on protecting critical banking apps and data, ensuring compliance with financial regulations, and providing solid L2 troubleshooting within a dynamic security environment.

The ideal candidate has 4-6 years of relevant experience, strong knowledge of F5 BIG-IP WAF/ASM and SSLO, and certifications

Qualifications

• BE/BTech/BCA or MSc in CS/IT required.
• 4-6 years of relevant experience in security/Networking.
• Certifications: CEH/CCNA/CCNP Sec + F5-CA/F5-CTS (2 certs) required.

Responsibilities

• Provide Level 2 operational support for F5 BIG-IP WAF and SSLO modules.
• Monitor platforms for performance, availability, and security events; respond per SLAs.
• Analyze and resolve web application security incidents and TLS/SSL issues.
• Escalate complex issues to L3 and F5 TAC as needed.
• Manage WAF and security policy configurations and tuning.
• Perform SSLO decrypt/inspect/re-encrypt of SSL/TLS traffic as required.
• Develop SOPs/runbooks and maintain knowledge base for incident resolution.
• Coordinate with stakeholders for incident analysis and remediation.

Skills

F5 BIG-IP

LTM

ASM/WAF

SSLO

Education

BE/BTech/BCA or MSc CS/IT

Job description

L2- WAF SSLO

Level: L2 (24*7)

Location: Mumbai

Education: BE/B-Tech/BCA or masters degree in CS/IT

Certification: CEH/CCNA/CCNP sec + OEM F5 Certification F5-CA/F5-CTS (2 certifications)

Experience: 4-6 years relevant experience.

Technology (OEM): F5 BIG-IP WAF/ASM, F5 BIG-IP SSL Orchestrator (SSLO).

Skills: In-depth knowledge of F5 BIG-IP platforms, including LTM, ASM/WAF, and SSLO.

Job Summary

The WAF SSLO L2 Engineer will be a key member of our network security team, responsible for the operational support, administration, and maintenance of the bank's Web Application Firewall and SSL Orchestrator platforms. This role focuses on protecting critical banking applications and sensitive data from modern web threats while ensuring compliance with stringent financial regulations. The ideal candidate will have strong L2 troubleshooting experience and a solid understanding of network security principles within a dynamic banking and financial services environment.

Key Responsibilities

• Provide Level 2 operational support for F5 BIG-IP systems, specifically for WAF (ASM) and SSL Orchestrator (SSLO) modules.
• Monitor F5 platforms for performance, availability, and security events, responding to alerts and service-desk tickets in line with established SLAs.
• Analyze and resolve security incidents related to web applications and SSL/TLS traffic, performing first-pass diagnostics and fixing routine issues.
• Escalate complex or high-severity issues to the L3 engineering team and F5 Technical Assistance Center (TAC) as required.
• Manage and deploy Web Application Firewall (WAF) policies and security policies, including managing exceptions and performing policy tuning.
• Perform configuration changes and updates on F5 SSL Orchestrator for decrypting, inspecting, and re-encrypting SSL/TLS traffic.
• Implement standard configurations for new applications and services as per design guidelines and bank policies.
• Develop and maintain Standard Operating Procedures (SOPs), runbooks, and a knowledge base for incident resolution.
• Lead the troubleshooting efforts for security incidents, providing accurate root cause analysis (RCA).
• Ensure that F5 WAF and SSLO configurations are compliant with the bank's security policies and regulatory requirements.
• Shall analyze incidents identify root causes and act for containment and remediation.
• Shall co-ordinate with the different departments/stakeholders for incident analysis and remedial action.
• Provides engineering analysis and architectural design of technical solutions.

Workplace type: On-site Working