MODULE LEAD - WAF

Happiest Minds Technologies; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

Happiest Minds Technologies in Kuala Lumpur is seeking a Senior WAF & Infrastructure Security Engineer with 7–10 years of cybersecurity experience to design, implement, and manage security controls across web applications, infrastructure, networks, and cloud environments.

The role requires hands-on expertise in WAF technologies, infrastructure security, vulnerability management, security hardening, and incident response, working with cross-functional teams to enhance security posture.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 7–10 years of cybersecurity experience across WAF, infrastructure security, and cloud environments.
• Hands-on experience with vulnerability management, security hardening and incident response.

Responsibilities

• Design, deploy, configure, and optimize enterprise WAF solutions.
• Manage security controls across servers, networks, virtualization, and cloud environments.
• Lead vulnerability assessments and remediation prioritization.
• Collaborate with SOC for threat detection and incident response.
• Audit security configurations and OWASP-aligned controls.

Skills

WAF Technologies

Infrastructure Security

Vulnerability Management

Security Monitoring

Cloud Security

Security Frameworks

Preferred Skills

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

F5 Advanced WAF (ASM)

Imperva WAF

Akamai Kona Site Defender

Cloudflare WAF

AWS WAF

Azure Web Application Firewall

Job description

Senior WAF & Infrastructure Security Engineer

Experience Required

7?10 Years

Job Summary

We are seeking a highly skilled Senior WAF & Infrastructure Security Engineer with 7?10 years of cybersecurity experience to design, implement, and manage security controls across web applications, infrastructure, networks, and cloud environments. The ideal candidate will have strong expertise in Web Application Firewall (WAF) technologies, infrastructure security, vulnerability management, security hardening, and incident response. This role requires hands-on technical expertise, strong analytical skills, and the ability to collaborate with application, cloud, infrastructure, and security teams to enhance the organization's security posture and protect critical business assets.

Key Responsibilities

Web Application Firewall (WAF) Security

• Design, deploy, configure, and optimize enterprise WAF solutions.
• Develop and maintain WAF policies, signatures, custom rules, and security controls.
• Monitor and mitigate web-based attacks, including:
  • SQL Injection (SQLi)
  • Cross-Site Scripting (XSS)
  • Cross-Site Request Forgery (CSRF)
  • Remote Code Execution (RCE)
  • API attacks
  • Bot attacks and DDoS threats
• Perform WAF tuning to reduce false positives and improve detection accuracy.
• Support application onboarding and security assessments for internet-facing applications.
• Conduct security reviews and recommend controls aligned with OWASP standards.

Infrastructure Security

• Implement and maintain security controls across servers, networks, virtualization platforms, and cloud environments.
• Perform security hardening for Windows, Linux, web servers, databases, and middleware platforms.
• Review and manage firewall rules, network segmentation, IDS/IPS, and secure access controls.
• Conduct infrastructure security assessments and recommend remediation actions.
• Support secure architecture reviews and deployment of new infrastructure components.

Vulnerability & Risk Management

• Lead vulnerability assessments using enterprise security tools.
• Analyze and prioritize vulnerabilities based on business risk and threat exposure.
• Coordinate remediation efforts with infrastructure, cloud, and application teams.
• Track remediation activities and ensure compliance with defined SLAs.
• Monitor security advisories, CVEs, and emerging threats.

Security Monitoring & Incident Response

• Investigate security alerts, suspicious activities, and potential security incidents.
• Perform root cause analysis and support incident response activities.
• Collaborate with SOC teams to strengthen threat detection and response capabilities.
• Develop and improve security monitoring use cases and detection mechanisms.

Cloud Security

• Implement and maintain security controls within AWS, Azure, or GCP environments.
• Review cloud configurations and identify security risks.
• Support cloud security assessments and compliance initiatives.
• Implement security best practices for hybrid and multi-cloud environments.

Governance & Compliance

• Support security audits, compliance assessments, and regulatory requirements.
• Develop security documentation, standards, and operational procedures.
• Create security reports, dashboards, and risk metrics for stakeholders.
• Ensure adherence to security frameworks and organizational policies.

Required Technical Skills

WAF Technologies

Hands-on Experience With One Or More Of

• F5 Advanced WAF (ASM)
• Imperva WAF
• Akamai Kona Site Defender
• Cloudflare WAF
• AWS WAF
• Azure Web Application Firewall

Infrastructure Security

• Windows and Linux Security Administration
• Infrastructure Hardening
• Network Security
• Firewall Management (Palo Alto, Fortinet, Check Point, Cisco Firepower)
• IDS/IPS Technologies
• VPN and Remote Access Security
• Secure Network Segmentation

Vulnerability Management

• Qualys VMDR
• Tenable Nessus/Tenable.io
• Rapid7 InsightVM
• Vulnerability Assessment and Risk Prioritization

Security Monitoring

• Splunk
• QRadar
• Microsoft Sentinel
• Log Analysis and Threat Detection

Cloud Security

• AWS Security Services
• Microsoft Azure Security Services
• Cloud Security Architecture and Best Practices

Security Frameworks

• OWASP Top 10
• CIS Benchmarks
• NIST Cybersecurity Framework
• ISO 27001
• MITRE ATT&CK Framework

Preferred Skills

• API Security
• DDoS Protection Solutions
• Scripting and Automation (Python, PowerShell, Bash)
• DevSecOps and CI/CD Security
• Terraform or Ansible
• Zero Trust Security Architecture

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• 7?10 years of experience in Infrastructure Security, Network Security, Security Engineering, or Cybersecurity.
• Minimum 3?5 years of hands-on experience managing enterprise WAF solutions and infrastructure security technologies.

WAF