Senior Network Engineer

CtrlS Datacenters; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

CtrlS Datacenters seeks an experienced WAF Engineer to design, implement, monitor, and tune application security and traffic-management solutions across enterprise environments.

You will design and manage WAFs and load balancers, analyze attack patterns such as SQLi and XSS, supervise BOT protections, and collaborate with network, security, and development teams to maintain availability and mitigate threats.

Qualifications

• Hands-on experience implementing and tuning WAF policies.
• Experience configuring and managing load balancer and GLB solutions.
• Strong understanding of application-layer attacks (SQLi, XSS) and OWASP Top 10.

Responsibilities

• Design, configure, implement, and manage WAF, Load Balancer, and GLB solutions.
• Configure and maintain WAF security policies, rules, signatures, and exceptions.
• Analyze and mitigate application-layer attacks including SQL Injection and XSS.
• Perform threat analysis and investigate suspicious traffic and security events.
• Analyze WAF logs, HTTP/HTTPS traffic, attack patterns, and security alerts.
• Develop and fine-tune WAF policies to balance security and availability.
• Configure BOT protection policies to identify and mitigate bot traffic.
• Implement and manage L7 DDoS protection mechanisms and mitigation strategies.
• Collaborate with network, security, application, and infrastructure teams for incident resolution.

Skills

WAF policy

Load Balancer

Global Load Balancer

App-layer security

Threat analysis

L7 DDoS protection

SQL Injection

BOT management

Job description

We are looking for an experienced WAF Engineer with strong hands-on expertise in Web Application Firewall (WAF), Load Balancers, Global Load Balancers (GLB), application-layer security, threat analysis, L7 DDoS protection, SQL Injection and BOT management.

The candidate will be responsible for designing, implementing, monitoring, troubleshooting, and tuning application security and traffic-management solutions across enterprise environments.

Key Responsibilities

• Design, configure, implement, and manage WAF, Load Balancer and Global Load Balancer solutions.
• Configure and maintain WAF security policies, rules, signatures, exceptions, and custom security controls.
• Analyze and mitigate application-layer attacks including SQL Injection, Cross-Site Scripting (XSS), OWASP Top 10 attacks, HTTP/HTTPS-based attacks, Application-layer DDoS / L7 DoS, Malicious and automated BOT traffic
• Perform threat analysis and investigate suspicious application traffic and security events.
• Analyze WAF logs, HTTP/HTTPS traffic, attack patterns, and security alerts to identify threats and false positives.
• Develop and fine-tune WAF policies to balance security and application availability.
• Configure BOT protection / BOT management policies to identify and mitigate malicious automated traffic.
• Implement and manage L7 DDoS protection mechanisms and mitigation strategies.
• Work on Global Load Balancing concepts such as DNS-based traffic distribution, geographic load balancing, application availability, and disaster recovery.
• Troubleshoot application connectivity, performance, SSL/TLS, routing, and load-balancing issues.
• Collaborate with network, security, application, and infrastructure teams for incident resolution.
• Participate in security incident investigation, RCA, and remediation activities.
• Monitor system performance, capacity, availability, and security posture.
• Prepare technical documentation, operational procedures, and incident reports.

Candidate Profile

• Strong understanding of application security and Layer 7 traffic management.
• Hands-on experience in WAF policy implementation and tuning.
• Good analytical and troubleshooting skills for identifying application and security-related issues.
• Ability to analyze attack signatures, HTTP requests, headers, URLs, parameters, and payloads.
• Experience handling security incidents involving SQL Injection, BOT attacks, L7 DoS/DDoS and malicious web traffic.
• Good communication and coordination skills.