WAF Engineer - Information Security
Atlanta, GA
1. At least 7 years of hands-on experience in web application security, with a significant focus on WAF administration and security policy management.
2.Extensive experience with Imperva WAF, including configuring, managing, and tuning security policies for production applications.
3.Experience creating and managing WAF rules and exceptions, access controls, rate-limiting policies, and bot protection controls, as applicable to the deployed Imperva products.
4.Strong understanding of web application vulnerabilities and attack vectors, including the OWASP Top 10, SQL injection, cross-site scripting, and DDoS attacks.
5.Experience troubleshooting false positives, blocked requests, application availability, and WAF-related performance issues.
6.Understanding of internet-facing application performance, including latency, caching, HTTP/2, and TLS.
7.Hands-on experience with Terraform and familiarity with Imperva APIs for configuration management and automation.
8.Experience analyzing security logs and integrating WAF events with SIEM platforms such as Splunk.
9.Proficiency in at least one scripting or programming language, such as Python or Bash, for automation and analysis.
10.Experience with public cloud platforms such as AWS, Azure, or Google Cloud and their native security services.
11.Familiarity with CI/CD pipelines, change management, and version control systems such as Git.
12.Strong understanding of network protocols and web technologies, including HTTP/HTTPS, SSL/TLS, and DNS."
