Network Security Architect with WAAP

Area(s) of responsibility

Skills: Network Security-WAAP

Experience: 8-11 years

Location: Bangalore Only

Key Responsibilities

WAAP Responsibilities (Primary Focus)

• Architect, implement, and manage WAAP platforms, including:




• Web Application Firewall (WAF)


• API Security (discovery, protection, runtime analysis)


• Bot Management


• DDoS Protection (L3–L7)




• Design and deploy WAAP solutions using platforms such as:




• Thales Imperva


• Cloud-native WAFs (Azure, AWS WAF) or equivalent




• Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.


• Perform false positive tuning, policy optimization, and rule lifecycle management.


• Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.


• Integrate WAAP with:




• SIEM/SOAR platforms


• Identity providers


• Threat intelligence feeds




• Collaborate with application teams to:




• Onboard applications into WAAP platforms


• Perform security assessments and risk reviews


• Ensure minimal performance impact while enforcing strong security controls




• Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).


• Lead WAAP incident response and root cause analysis for application-layer attacks.


• Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).


• Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

WAAP & Application Security Expertise (Mandatory)

• Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).


• Deep understanding of:




• OWASP Top 10 (Web & API)


• Application-layer threats and mitigation techniques




• Hands-on experience in:




• WAF policy creation and tuning


• API security controls (schema validation, authentication enforcement)


• Bot mitigation strategies


• DDoS protection architecture (L3–L7)




• Experience in:




• Traffic analysis (HTTP/HTTPS, TLS inspection)


• Behavioral-based threat detection




• Strong understanding of:




• Secure application architectures (monolith, microservices, APIs)


• DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

• Strong hands-on experience in:




• Firewalls (Fortinet, Palo Alto, Juniper)


• IDS/IPS, VPN, SIEM




• Expertise in:




• Firewall policy design, NAT, routing, inspection, and threat prevention




• Experience in designing secure:




• Hybrid (on-prem + cloud + internet-facing) environments




• Experience in:




• Proxy architectures (forward/reverse)