WAF-Akami

HR India Solutions; Pune District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

HR India Solutions is seeking a WAF-Akami specialist in Pune to maintain and manage WAF technology, including Akamai and Cloudflare variants. The role reports to the CISO through skip-level management, focusing on policy configuration, log reviews, and security incident handling.

The ideal candidate will have 4–6 years of experience in information security, with hands-on WAF expertise and strong collaboration with SOC and compliance teams. Face-to-face interviews at Viman Nagar, Pune.

Qualifications

• 3+ years in Web application monitoring (WAF)
• 2+ years in Information / Cyber / application security
• Experience with information security tool compliance & incident management (WAF, AV/EDR, Vulnerability management tool, FIM, SIEM)

Responsibilities

• Deploy and manage WAF deployment, configuration and policy management.
• Monitor and respond to WAF/DDoS/BOT incidents and alerts.
• Coordinate with SOC for threat detection and rule improvements.
• Ensure policy compliance with PCI-DSS, OWASP Top 10, and NIST frameworks.

Skills

Akamai WAF administration

Akamai WAF onboarding

WAF management

Cloudflare WAF administration

Tools

Sentinel

Splunk

QRadar

SOAR

Ansible

Terraform

Job description

Role: WAF-Akami

Location:Pune

Exp: 4- 6 Yrs

Age: 28 Yrs (Maximum)

Interview: Face 2 Face (2 round) -viman nagar, pune

Demand Skills

Akamai /Akamai WAF administration /Akamai WAF onboarding /WAF management /Cloudflare WAF administration

Job Purpose

Information security tech team member (with skip level reporting to CISO) who is proficient in maintaining & managing WAF technology, Information Security tool management & governance. Understanding of regulatory requirements, maintaining the tool compliance, configuring the tool policy, logs review & alert/incident handling. Driving information Security projects & Monitoring Key Risk Indicators (KRIs) for Information Security.

Duties and Responsibilities

A-Minimum required Accountabilities for this role

Application & Network Security Expertise

• Strong hands-on experience in Web Application Firewall (WAF) deployment, configuration, and management.
• Experienced in DDOS and BOT protection platform management and incident closures.
• Knowledge of network security concepts (BOT protection, Zero Trust, DDoS protection, SSL/TLS, IDS/IPS).

Security Monitoring & Automation

• Experience with SIEM tools (Sentinel / Splunk / QRadar ) for threat detection.
• Familiarity with automation tools ( SOAR / Ansible / Terraform) for security policy management.

Incident Response & Compliance

• Handling security incidents related to WAF, DDoS, and firewall breaches.
• Knowledge of compliance standards (PCI-DSS, OWASP Top 10, NIST). Responsible for Incident, Problem, Change Management & Service Request.
• Security agent / software compliance like AV/EDR, Vulnerability management tool, FIM, SIEM agent.
• Knowledge of strong in ITIL Process.

B-Additional Accountabilities pertaining to the role

• Design, implement, and manage WAF/DDOS/BOT policies to protect web applications from attacks (SQLi, XSS, OWAPS top 10 etc.).
• Maintain compliance as per organization compliance policy
• Work with SOC team to investigate security alerts and improve detection rules.
• Document security policies, configurations, and incident reports.
• Flexible to extend beyond work hours towards accomplishing assigned tasks.
• Interaction with OEM for Highly Critical technical support.
• Responsible for Reports & Technical documentation.
• Communicate effectively with stakeholders & cross function teams
• Strong troubleshooting, analytical, and communication skills

Key Decisions / Dimensions

• Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take require steps.
• Discuss observation response as applicable & improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.|Potential regulatory actions due to non-compliances

Major Challenges

• Handling of fast changing environment with variety of cloud service providers
• Handling of compliance expectations in stringent timelines
• Handling multiple stakeholders at a time
• Coordination with third party consultants who assist in auditing and compliance initiatives

Required Qualifications and Experience

a)Qualifications

• Minimum 3+ years of experience in Web application monitoring (WAF)
• Minimum 2+ years in Information / Cyber / application security.

b)Work Experience

• Knowledge & hands-on experience in information security tool compliance & incident management (WAF, AV/EDR, Vulnerability management tool, FIM, SIEM agent)
• Sound knowledge on IT infrastructure, Information Security concept & tools, ISMS & BCMS frameworks, regulatory guidelines related to IT and cyber for NBFCs
• Experience in Project management.
• Positive attitude, Hard Worker and team player
• Excellent Communication and Leadership Skills
• Certifications like CEH (Ethical Hacking), Azure/AWS Security, WAF/application penetration testing would be an added advantage
• Cloud security knowledge with CSPM, CWPP experience would be added advantage