WAF Engineer

Nemetschek Group; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Nemetschek Group is seeking a skilled Web Application Firewall (WAF) Engineer to safeguard our web applications and APIs by deploying, configuring, and maintaining modern WAF solutions across brands. The role covers management of WAF rules, incident response, and collaboration with DevOps and security teams.

The ideal candidate will have hands-on experience with cloud-native WAF services (AWS WAF, Azure WAF, GCP Cloud Armor) and edge WAFs like Cloudflare, along with strong knowledge of HTTP/S

Qualifications

• Strong knowledge of HTTP/S protocols and web app security
• Experience managing WAF solutions (Cloudflare, AWS WAF, Azure WAF)
• Familiarity with API security, CDN integrations, bot management
• Experience with log management solutions (Splunk, ELK, OpenSearch) and integrating WAF logs
• Working knowledge of DevOps best practices (CI/CD, IaC Terraform/CloudFormation)

Responsibilities

• WAF management, configuration, and tuning across environments
• Implement custom rules to mitigate threats, bots, and API vulnerabilities
• Collaborate with developers/DevOps to align WAF with business needs
• Integrate WAF with SIEM and monitoring for real-time visibility
• Investigate issues, optimize performance, and reduce false positives
• Create and maintain documentation of WAF configurations and runbooks
• Collaborate with SOC and NOC teams for incident response and remediation

Skills

WAF management

Cloudflare AWS Azure WAF

API security

Log management (Splunk ELK OpenSearch)

DevOps / IaC (CI/CD, Terraform)

HTTP/S protocols

Tools

Splunk

ELK

OpenSearch

Cloudflare

AWS WAF

Azure WAF

Job description

We are seeking a skilled Web Application Firewall (WAF) Engineer to join our security team. Candidate for this role is in charge for safeguarding our web applications and APIs by deploying, configuring, and maintaining modern WAF solutions. The ideal candidate must have theoretical and hands‑on experience with both cloud‑native WAF services (such as AWS WAF, Azure WAF, GCP Cloud Armor) and edge WAF solutions such as Cloudflare.

ROLES AND RESPONSIBILITY:

WAF Management & Configuration

• Deploy, configure, and tune WAF policies and rules across multiple environments (different applications for different brands).
• Implement custom rules to mitigate emerging security threats, bot attacks or API vulnerabilities.
• Partner with developers/application teams to align WAF rules with business requirements.
• Integrate WAF solutions with SIEM or other monitoring systems for real‑time visibility and reporting.
• Investigate and resolve issues related to WAF functionality, performance, and traffic flow and support developers and DevOps teams in troubleshooting blocked traffic and false positives. Security Operations

Security Operations

• Create meaningful alerts to trigger when a specific incident or changes in traffic pattern is happening.
• Monitor WAF logs and alerts to detect and respond to suspicious activity.
• Continuously update rule sets to adapt to emerging threats.
• Conduct periodic audits to ensure WAF coverage and compliance with security policies.

Collaboration & Documentation

• Maintain clear documentation of WAF policies, configurations, and troubleshooting guides.
• Collaboration with other colleagues in Security Operation Center and Network Operation Centers.

WHO ARE WE LOOKING FOR:

• Strong understanding of HTTP/S protocols, web application/API architecture, and common web application/API attack and defense mechanism.
• Proven experience managing and troubleshooting WAF solutions (Cloudflare, AWS WAF, Azure WAF, or similar).
• Familiarity with API security, CDN integrations, and bot management solutions.
• Experience in log management solutions (e.g., Splunk, ELK, OpenSearch etc.) and integrating WAF logs into other platforms.
• Working knowledge of DevOps best practices (CI/CD pipelines, Infrastructure as Code, Terraform/CloudFormation preferred).
• Strong analytical and problem‑solving skills with the ability to work in high‑pressure environments.

SKILLS PREFERRED:

• Security relevant certifications such as AWS Security Specialty, Cloudflare Certified Expert, CEH, or CISSP