Web Application Firewall (WAF) Engineer_Bangalore

Tanisha Systems Inc.; Bengaluru; Hybrid; INR 1,200,000 - 2,400,000; Full time

Job summary

Tanisha Systems Inc. in Bengaluru is seeking a Web Application Firewall (WAF) Security Engineer to protect internet-facing applications by deploying and tuning Cloudflare WAF, writing security policies, and automating configurations with IaC.

The role emphasizes policy management, performance considerations, and collaboration with DevOps to integrate security into CI/CD pipelines using Terraform and cloud-native services. Strong scripting (Python/Bash) and knowledge of OWASP Top 10 are required.

Qualifications

• Hands-on experience with Web Application Firewall policies.
• Proficient in Cloudflare WAF rule writing and tuning.
• Experience with IaC automation using Terraform.
• SIEM/log analysis experience (Splunk).
• Strong scripting ability (Python or Bash) for automation.
• Experience with public cloud providers (AWS/Azure/GCP).
• Understanding of HTTP/HTTPS, TLS, and OWASP Top 10.
• Familiarity with CI/CD pipelines and Git.

Skills

WAF security engineering

Cloudflare WAF

Security policy development

Terraform

Splunk SIEM

Python/Bash scripting

Public cloud security (AWS/Azure/GCP)

CI/CD & Git

HTTP/TLS/DNS knowledge

Tools

Cloudflare WAF

Terraform

Splunk

Git

Job description

Job Title: Web Application Firewall (WAF) Security Engineer

Role Overview: The Web Application Firewall (WAF) Security Engineer is a critical role within our Network Security Team team, focusing on protecting internet-facing applications through the implementation and management of WAF solutions. This role is ideal for individuals with strong WAF experience and a proven track record in security policy development and infrastructure as code (IaC) automation.

Qualifications:

• At least 5 years of hands-on experience in Web Application Security, with a significant focus on security policy management.
• Extensive experience with Cloudflare WAF, including writing and tuning security policies.
• Experience with Custom WAF rules such as Firewall Rules, Rate Limiting, Bot Management, Managed Rules. Deeper understanding of performance considerations for an internet facing site such as latency, caching strategies, HTTP/2, and TLS 1.3.
• Strong knowledge of web application security concepts, common vulnerabilities (e.g., OWASP Top 10), and attack vectors (DDoS).
• Hands-on experience with infrastructure-as-code, particularly Terraform.
• Experience with log / data analysis and SIEM tools (e.g., Splunk).
• Proficiency in at least one scripting or programming language (e.g., Python, Bash) for automation tasks.
• Experience with public cloud providers (AWS, Azure, or GCP) and their native security services.
• Familiarity with CI/CD pipelines and version control systems (e.g., Git).
• Understanding of network protocols and web technologies (HTTP/HTTPS, SSL/TLS, DNS).