Senior Domain Manager

HR India Solutions; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

HR India Solutions seeks an information security professional to maintain WAF, manage related tools, and govern security policies. You will monitor events, coordinate with the SOC, and ensure regulatory compliance across PCI-DSS, OWASP Top 10, and NIST frameworks.

Strong hands-on experience with WAF, SIEM, and automation tools is required. The role involves incident response, policy management, and collaboration with cross-functional teams to strengthen overall security posture.

Qualifications

• Minimum 3+ years in Web application monitoring (WAF).
• Minimum 2+ years in information/cyber/application security.
• Hands-on with SIEM tools and security policy management.

Responsibilities

• Manage WAF deployment, configuration, and policy enforcement.
• Handle security incidents related to WAF, DDoS, and firewall breaches.
• Collaborate with SOC and cross-functional teams on detections and response.
• Ensure tool compliance with regulatory guidelines (PCI-DSS, OWASP, NIST).
• Document security policies, event reports, and technical procedures.

Skills

WAF monitoring

Information security

Cyber security

Application security

SIEM

Incident management

ITIL processes

SOC coordination

Policy management

Tools

Sentinel

Splunk

QRadar

SOAR

Ansible

Terraform

Vulnerability management tool

FIM

EDR

Job description

Job Purpose

Information security tech team member (with skip level reporting to CISO) who is proficient in maintaining & managing WAF technology, Information Security tool management & governance. Understanding of regulatory requirements, maintaining the tool compliance, configuring the tool policy, logs review & alert/incident handling. Driving information Security projects & Monitoring Key Risk Indicators (KRIs) for Information Security.

Duties and Responsibilities

A Minimum required Accountabilities for this role

Application & Network Security Expertise

• Strong hands-on experience in Web Application Firewall (WAF) deployment, configuration, and management.
• Experienced in DDOS and BOT protection platform management and incident closures.
• Knowledge of network security concepts (BOT protection, Zero Trust, DDoS protection, SSL/TLS, IDS/IPS).

Security Monitoring & Automation

• Experience with SIEM tools (Sentinel / Splunk / QRadar ) for threat detection.
• Familiarity with automation tools ( SOAR / Ansible / Terraform) for security policy management.

Incident Response & Compliance

• Handling security incidents related to WAF, DDoS, and firewall breaches.
• Knowledge of compliance standards (PCI-DSS, OWASP Top 10, NIST). Responsible for Incident, Problem, Change Management & Service Request.
• Security agent / software compliance like AV/EDR, Vulnerability management tool, FIM, SIEM agent.
• Knowledge of strong in ITIL Process.

B-Additional Accountabilities

• Design, implement, and manage WAF/DDOS/BOT policies to protect web applications from attacks (SQLi, XSS, OWAPS top 10 etc.).
• Maintain compliance as per organization compliance policy
• Work with SOC team to investigate security alerts and improve detection rules.
• Document security policies, configurations, and incident reports.
• Flexible to extend beyond work hours towards accomplishing assigned tasks.
• Interaction with OEM for Highly Critical technical support.
• Responsible for Reports & Technical documentation.
• Communicate effectively with stakeholders & cross function teams
• Strong troubleshooting, analytical, and communication skills

Key Decisions / Dimensions

• Potential regulatory actions due to non-compliances Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take require steps.
• Discuss observation response as applicable & improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.

Major Challenges

• Handling of fast changing environment with variety of cloud service providers
• Handling of compliance expectations in stringent timelines
• Handling multiple stakeholders at a time
• Coordination with third party consultants who assist in auditing and compliance initiatives

Required Qualifications and Experience

a)Qualifications

• Minimum 3+ years of experience in Web application monitoring (WAF)
• Minimum 2+ years in Information / Cyber / application security.

b)Work Experience

• Knowledge & hands-on experience in information security tool compliance & incident management (WAF, AV/EDR, Vulnerability management tool, FIM, SIEM agent)
• Sound knowledge on IT infrastructure, Information Security concept & tools, ISMS & BCMS frameworks, regulatory guidelines related to IT and cyber for NBFCs
• Experience in Project management.
• Positive attitude, Hard Worker and team player
• Excellent Communication and Leadership Skills
• Certifications like CEH (Ethical Hacking), Azure/AWS Security, WAF/application penetration testing would be an added advantage
• Cloud security knowledge with CSPM, CWPP experience would be added advantage