WAF Operations Engineer
- Indusind Bank
- 10 - 15 years
- Hyderabad
- 26 days ago
- Email to a friend
- Report this job
Job Description
Role Overview:
- Endtoend operational management and security efficacy of cloudbased nextgeneration WAF across multiple environments (public cloud, edge/CDN, and hybrid). The role spans policy design, application onboarding, performance optimization and compliance. Closely work with application owners, IT infra, Security, SOC and the Vendor/OEM teams to defend web, Mobile and API workloads against OWASP Top 10, bot attacks, DDoS and emerging threats.
Role & responsibilities
- Own WAF lifecycle: deployment, configuration, tuning, upgrades, and maintenance across environments (e.g., CDNWAF like Indusface/Cloudflare/F5/Imperva)
- Policy & rule management: Custom signatures, manage managed rule sets, IP reputation feeds, geocontrols, and positive security models for critical apps and APIs.
- Falsepositive tuning: systematically reduce noise via staging & sampling, maintain acceptable block/allow ratios without impacting business traffic.
- Bot management: configure bot detection/mitigation, JS challenges, behavioural anomaly detection, device fingerprinting, and ratelimiting strategies.
- API protection: enforce schema validation (OpenAPI), header/verb controls, JWT validation and abuse prevention for API endpoints.
- DDoS & L7 resilience: integrate WAF controls with upstream DDoS protection, caching, and origin shielding.
- Documentation: maintain SOPs, hardening guides, and tuning playbooks
- Stakeholder communication: produce monthly posture reports, incident summaries and change advisories for IT leadership.
- Standards alignment: ensure controls meet OWASP ASVS and BFSI regulation.
Preferred candidate profile
- Bachelors/Masters in Computer Science, Information Technology or related field.
- 10+ years in application security or network security with minimum 7+ years handson managing WAFs at scale.
- Direct experience with one or more: Indusface/F5/Imperva.
- Strong knowledge of HTTP/S, TLS, CDN/edge architectures, reverse proxies, Load Balancers, DNS, L7 DDoS controls and routing.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Network Security EngineerEmployement Type: Full timeContact Details:
Company: Indusind BankLocation(s): Hyderabad+ View Contact
Keyskills: SOC Web Application Firewall IT Infrastructure IT Security
Fraud Alert to job seekers!
₹ 20-30 Lacs P.A
Similar positions
Indusind Bank
Wipro Ltd (NYSE:WIT) is a global information technology, consulting and outsourcing company with 170,000+ workforce serving clients in 175+ cities across 6 continents. \\r\\n\\r\\nWipro helps customers do business better by leveraging our industry-wide experience, deep technology expertise, comprehe...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in