Senior Engineer WAF

About this role

Not quite right? These jobs in Hyderabad match the same skills — apply to a few to improve your chances.

Senior Software Engineer - Go, AWS, Python

Nasuni

In OfficeHyderabad

Apply

Software Engineer III (Python, C#, AWS, Snowflake/Databricks and/or Go)

FactSet

In OfficeHyderabad

Apply

Specialist, Software Engineer (DevOps, Harness, JFrog Artifactory, UCD, Jenkins, AWS, GitHub, GitHub Actions & GitHub Copilot)

Nationwide

In OfficeHyderabad

Apply

Senior Software Engineer - AWS

Agilent

In OfficeHyderabad

Apply

Skills you'll use

What you'll do

• Design, implement, and manage WAF policies for web applications and APIs across environments (dev/stage/prod).
• Configure and tune managed rules and custom rules to mitigate OWASP Top 10 (SQLi, XSS, CSRF, RCE, LFI/RFI, SSRF, etc.).
• Perform rule tuning and false-positive reduction using traffic baselining, exception handling, and staged enforcement (monitor → challenge → block).
• Implement rate limiting, IP reputation, geo/ASN controls, and bot mitigation strategies to reduce abuse and credential stuffing.
• Integrate WAF logs with SIEM/log platforms (Splunk, Sentinel, ELK, QRadar) and build dashboards/alerts for threat monitoring.
• Support incident response for active attacks (L7 DDoS, exploit attempts), including rapid mitigation and post-incident improvements.
• Automate deployments using IaC (Terraform/CloudFormation/ARM/Bicep) and integrate with CI/CD pipelines.
• Conduct periodic security reviews, reporting, and metrics tracking (blocked events, top attacks, FP rate, MTTR).
• Collaborate with app teams on secure configuration (headers, TLS, authentication flows) and compatibility testing.
• Demonstrated experience in automation using PowerShell or Python to integrate with Imperva APIs for scalable WAF policy deployment, configuration management, and operational efficiency.

Who can apply

• 7+ years experience in WAF engineering and Implementation.
• Hands-on experience with at least one WAF platform: Imperva(preferred), Akamai, ModSecurity, AWS WAF, Azure WAF, Cloudflare, F5 ASM/Advanced WAF,
• Strong understanding of HTTP/HTTPS, web app architecture, REST APIs, and common attack patterns.
• Proven experience tuning WAF rules and balancing security vs. false positives.

About LE100 Zelis Healthcare India

Searching for “LE100 Zelis Healthcare India jobs” or “jobs at LE100 Zelis Healthcare India”? You’re in the right place.