Sr Network Security Engineer

Birlasoft; Bengaluru; On-site; INR 4,000,000 - 6,800,000; Full time

Job summary

Birlasoft is seeking an experienced WAAP Architect to design, implement, and manage WAAP platforms across web and API surfaces in a Bangalore-based role. You will develop custom rules and policies, tune false positives, and collaborate with application teams to onboard new apps while maintaining strong security controls.

The role requires deep knowledge of WAAP platforms (Akamai preferred), OWASP Top 10, and CI/CD security integration.

Qualifications

• Architect, implement and manage WAAP platforms and protect critical applications.
• Provide protection against OWASP Top 10 threats for web and API surfaces.
• Collaborate with application teams to onboard apps and perform risk reviews.

Responsibilities

• Architect, implement, and manage WAAP platforms across the stack.
• Design and deploy WAAP solutions using Thales Imperva or cloud-native WAFs.
• Develop and tune custom WAF rules, policies, and signatures.
• Lead incident response for application-layer attacks and track KPIs.

Skills

WAAP architecture

WAF policy tuning

API security controls

DDoS protection

Threat detection

Tools

Akamai WAAP

Cloud WAF (Azure/AWS)

Fortinet

Palo Alto

SIEM/SOAR

Job description

Area(s) of responsibility

• Architect, implement, and manage WAAP platforms, including:
• Web Application Firewall (WAF)
• API Security (discovery, protection, runtime analysis)
• Bot Management
• Design and deploy WAAP solutions using platforms such as:
• Thales Imperva
• Cloud-native WAFs (Azure, AWS WAF) or equivalent
• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
• Perform false positive tuning, policy optimization, and rule lifecycle management.
• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
• Integrate WAAP with:
• SIEM/SOAR platforms
• Identity providers
• Collaborate with application teams to:
• Onboard applications into WAAP platforms
• Perform security assessments and risk reviews
• Ensure minimal performance impact while enforcing strong security controls
• Lead WAAP incident response and root cause analysis for application-layer attacks.
• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

Skills: Network Security-WAAP

Experience: 8-11 years

Location: Bangalore Only

Key Responsibilities

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manage WAAP platforms, including:
  • Web Application Firewall (WAF)
  • API Security (discovery, protection, runtime analysis)
  • Bot Management
  • DDoS Protection (L3–L7)
• Design and deploy WAAP solutions using platforms such as:
  • Thales Imperva
  • Cloud-native WAFs (Azure, AWS WAF) or equivalent
• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.
• Perform false positive tuning, policy optimization, and rule lifecycle management.
• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.
• Integrate WAAP with:
  • SIEM/SOAR platforms
  • Identity providers
  • Threat intelligence feeds
• Collaborate with application teams to:
  • Onboard applications into WAAP platforms
  • Perform security assessments and risk reviews
  • Ensure minimal performance impact while enforcing strong security controls
• Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).
• Lead WAAP incident response and root cause analysis for application-layer attacks.
• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).
• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent).
• Deep understanding of:
  • OWASP Top 10 (Web & API)
  • Application-layer threats and mitigation techniques
• Hands-on experience in:
  • WAF policy creation and tuning
  • API security controls (schema validation, authentication enforcement)
  • Bot mitigation strategies
  • DDoS protection architecture (L3–L7)
• Experience in:
  • Traffic analysis (HTTP/HTTPS, TLS inspection)
  • Behavioral-based threat detection
• Strong understanding of:
  • Secure application architectures (monolith, microservices, APIs)
  • DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

• Strong hands-on experience in:
  • Firewalls (Fortinet, Palo Alto, Juniper)
  • IDS/IPS, VPN, SIEM
• Expertise in:
  • Firewall policy design, NAT, routing, inspection, and threat prevention
• Experience in designing secure:
  • Hybrid (on-prem + cloud + internet-facing) environments
• Experience in:
  • Proxy architectures (forward/reverse)