Web Application Firewall Engineer

Purview Services; Hyderabad, Pune District; Hybrid; INR 1,800,000 - 3,000,000; Full time

Job summary

Purview Services in Hyderabad is seeking a seasoned Web Application Firewall (WAF) security engineer to design, implement, and tune enterprise-grade WAF deployments across edge, cloud, and on-prem environments. You will craft custom rules, optimize configurations, and ensure robust protection against web threats.

You will collaborate with DevSecOps, SOC, and cloud teams, maintain documentation, and participate in security incident response.

Qualifications

• Strong experience with multiple WAF solutions for edge, cloud, and on-premise.
• Cloud WAF controls including AWS/Azure/GCP is preferred.
• Understanding of web application security attack methods and mitigations.
• Proficiency in WAF tuning and configuration with web security principles.

Skills

WAF solutions

Cloud WAF controls

Web application security

WAF tuning

Custom WAF rules

WAF process design

DevSecOps

IDAM / access control

HTTPS inspection

Rate limiting

Logging & monitoring

SOC liaison

Tools

Git

Logging tools

Job description

CORE SKILLS/TECHNICAL REQUIREMENT

• Strong experience with multiple WAF solutions for edge, cloud, and on-premise
• Strong experience with cloud services and their WAF controls, ideally including one or more of the following: AWS, Azure, and GCP
• Strong understanding of Web Application security attack methods and mitigations
• Proficiency in WAF tuning and configuration, coupled with a strong foundation in web security principles and practices.
• Develop custom WAF rules and features, addressing gaps and enhancing overall security measures
• Capability to design and implement bespoke WAF processes and documentation, underpinned by a thorough understanding of web application security.
• Analytical skills to review and align platforms with MVP and Baseline Configurations, leveraging a deep knowledge of WAF functionalities and limitations.
• Providing Dev SecOps pipeline maintenance support for the automation works
• Familiarity with IDAM protocols and access control measures for WAF management, informed by strong web security knowledge.
• Understanding of HTTPS inspection, including Termination and Certificate management, grounded in robust web security practices.
• Experience in rate limiting techniques and their integration into security configurations
• Experience of version control and update mechanisms for WAF solutions
• Competency in identifying and documenting platform and organisational logging options, with a focus on security implications and cloud environments.
• Experience interfacing with SOC during WAF related security incidents

OTHER SKILLS

• Strong stakeholder management skills
• Attention to detail in analysing large data sets
• Excellent interpersonal skills with strong communication skills both written and verbally
• Experience working in Agile, or knowledge of the key principles of the methodology