Senior Network Security Engineer

Note :- WAAP (Web Application & API Protection) experience is must

Client is an innovative, dynamic company with a rich past and a promising future. Client has continuously reinvented itself. Today, Client is one of the world's leading technology companies providing networking, cloud, and security solutions for next-generation IT infrastructure.

Key Responsibilities

·         Translate business and application security requirements into enterprise-grade WAAP and network security architectures.

·         Develop and support solutions aligned with Client application security and defense-in-depth strategy.

·         Lead architecture, design, and deployment of Web Application and API Protection (WAAP) solutions across global environments.

·         Develop and drive multi-year roadmap for application-layer security, including WAF, API security, bot protection, and DDoS mitigation.

WAAP Responsibilities (Primary Focus)

·         Architect, implement, and manage WAAP platforms, including: 

o    Web Application Firewall (WAF)

o    API Security (discovery, protection, runtime analysis)

o    Bot Management

o    DDoS Protection (L3–L7)

·         Design and deploy WAAP solutions using platforms such as: 

o    Thales Imperva

o    Cloud-native WAFs (Azure, AWS WAF) or equivalent

·         Develop and maintain custom WAF rules, security policies, and signatures to protect critical applications.

·         Perform false positive tuning, policy optimization, and rule of lifecycle management.

·         Enable API discovery, schema enforcement, and protection against OWASP API Top 10 threats.

·         Integrate WAAP with: 

o    SIEM/SOAR platforms

o    Identity providers

o    Threat intelligence feeds

·         Collaborate with application teams to: 

o    Onboard applications into WAAP platforms

o    Perform security assessments and risk reviews

o    Ensure minimal performance impact while enforcing strong security controls

·         Implement protection against OWASP Top 10 vulnerabilities (SQLi, XSS, RCE, etc.).

·         Lead WAAP incident response and root cause analysis for application-layer attacks.

·         Define and track application security metrics and KPIs (attack trends, mitigation effectiveness).

·         Ensure compliance with security frameworks (CIS, NIST, Zero Trust, data protection standards).

Core Network Security Responsibilities

·         Architect and maintain secure network infrastructure across data center, campus, and cloud environments.

·         Conduct security design reviews ensuring compliance with enterprise security standards.

·         Provide risk reporting, control effectiveness, and security posture visibility.

·         Support internal and external security audits.

·         Manage and optimize Security Information and Event Management (SIEM) systems.

·         Develop and maintain network security policies and procedures.

·         Collaborate with cybersecurity, infrastructure, and application teams globally.

Technical Qualifications

·         10+ years of experience in network security architecture, engineering, and operations.

WAAP & Application Security Expertise (Mandatory)

·         Strong experience with WAAP platforms (Akamai preferred; Cloud WAF or equivalent accepted).

·         Deep understanding of: 

o    OWASP Top 10 (Web & API)

o    Application-layer threats and mitigation techniques

·         Hands-on experience in: 

o    WAF policy creation and tuning

o    API security controls (schema validation, authentication enforcement)

o    Bot mitigation strategies

o    DDoS protection architecture (L3–L7)

·         Experience in: 

o    Traffic analysis (HTTP/HTTPS, TLS inspection)

o    Behavioral-based threat detection

·         Strong understanding of: 

o    Secure application architectures (monolith, microservices, APIs)

o    DevSecOps integration and CI/CD security controls (nice to have)

Network Security & Infrastructure

·         Strong hands-on experience in: 

o    Firewalls (Fortinet, Palo Alto, Juniper)

o    IDS/IPS, VPN, SIEM

·         Expertise in: 

o    Firewall policy design, NAT, routing, inspection, and threat prevention

·         Experience in designing secure: 

o    Hybrid (on-prem + cloud + internet-facing) environments

·         Experience in: 

o    Proxy architectures (forward/reverse)

o    Secure internet gateways

Networking & Protocol Expertise

·         Strong knowledge of: 

o    TCP/IP, DNS, HTTP/HTTPS, TLS/SSL

o    Routing protocols (BGP, OSPF, MPLS)

·         Experience with: 

o    QoS, NetFlow, ACLs, NAT, IP traffic management

o    Network monitoring and analysis tools

Cloud & Integration

·         Experience securing applications in: 

o    AWS, Azure, Google Cloud Platform

·         Familiarity with: 

o    Cloud-native WAF and API security tools

·         Integration experience with: 

o    SIEM, EDR/XDR, IAM platforms

Data Center & Enterprise Networking

·         Experience managing enterprise environments with: 

o    Aruba, Arista, Juniper switches

o    Firewalls, load balancers, WAN optimization tools

·         Understanding of: 

o    High availability and performance optimization for application traffic

Operations & Lifecycle Management

·         Lead onboarding and lifecycle management of applications into WAAP platforms.

·         Perform security tuning, upgrades, and optimization activities.

·         Support incident response and threat mitigation at application layer.

·         Work within ITIL frameworks (incident, problem, change management).

Education & Certifications

·         Bachelor’s Degree in Computer Science, IT, or related field (or equivalent experience).

·         10+ years of experience in enterprise network security and application security.

·         Preferred certifications: 

o    CCNP / CCIE / JNCIE

o    Security certifications (CISSP, CISM)

o    Vendor certifications (Akamai, AWS Security, Azure Security)

Key Differentiators (What This JD Targets)

·         Positions WAAP as a primary security control layer, not an add-on

·         Strong alignment with: 

o    Application security + Network security convergence

o    Defense-in-depth strategy

·         Emphasizes: 

o    API security (modern requirement)

o    Bot/DDoS protection (critical for internet-facing apps)

·         Keeps strong foundation in: 

o    Firewalls, SIEM, network architecture