WAF Engineer
Ashish JhaUnited StatesMIDPosted 1h ago
WAFInformation SecurityImpervaOWASP Top 10SQL InjectionCross-site ScriptingDDoSTerraformSplunkPythonBashAWSAzureGoogle CloudCI/CDGitHTTP/HTTPSSSL/TLSDNS
About the Role
We are looking for a WAF Engineer to join our team. This role focuses on web application security with a significant emphasis on WAF administration and security policy management.
Key Responsibilities
• Configure, manage, and tune security policies for production applications
• Create and manage WAF rules and exceptions, access controls, rate-limiting policies, and bot protection controls
• Troubleshoot false positives, blocked requests, application availability, and WAF-related performance issues
• Analyze security logs and integrate WAF events with SIEM platforms
• Implement security policies using Imperva WAF
Requirements
• At least 7 years of hands-on experience in web application security
• Extensive experience with Imperva WAF
• Strong understanding of web application vulnerabilities and attack vectors
• Experience with Terraform and Imperva APIs
• Proficiency in at least one scripting or programming language
• Experience with public cloud platforms and their native security services
• Familiarity with CI/CD pipelines, change management, and version control systems