WAF Engineer

About this role

Not quite right? These jobs in Hyderabad match the same skills — apply to a few to improve your chances.

Senior Software Engineer - Go, AWS, Python

Nasuni

In OfficeHyderabad

Apply

Software Engineer III (Python, C#, AWS, Snowflake/Databricks and/or Go)

FactSet

In OfficeHyderabad

Apply

Specialist, Software Engineer (DevOps, Harness, JFrog Artifactory, UCD, Jenkins, AWS, GitHub, GitHub Actions & GitHub Copilot)

Nationwide

In OfficeHyderabad

Apply

Senior Software Engineer - AWS

Agilent

In OfficeHyderabad

Apply

Skills you'll use

What you'll do

• Design, implement, and manage WAF policies for web applications and APIs across environments (dev/stage/prod).
• Configure and tune managed rules and custom rules to mitigate OWASP Top 10 (SQLi, XSS, CSRF, RCE, LFI/RFI, SSRF, etc.).
• Perform rule tuning and false-positive reduction using traffic baselining, exception handling, and staged enforcement (monitor → challenge → block).
• Implement rate limiting, IP reputation, geo/ASN controls, and bot mitigation strategies to reduce abuse and credential stuffing.
• Integrate WAF logs with SIEM/log platforms (Splunk, Sentinel, ELK, QRadar) and build dashboards/alerts for threat monitoring.
• Support incident response for active attacks (L7 DDoS, exploit attempts), including rapid mitigation and post-incident improvements.
• Automate deployments using IaC (Terraform/CloudFormation/ARM/Bicep) and integrate with CI/CD pipelines.
• Conduct periodic security reviews, reporting, and metrics tracking (blocked events, top attacks, FP rate, MTTR).
• Collaborate with app teams on secure configuration (headers, TLS, authentication flows) and compatibility testing.
• Required Qualifications

Who can apply

• 7+ years experience in WAF engineering / application security / edge security.
• Hands-on experience with at least one WAF platform: AWS WAF, Azure WAF, Cloudflare, F5 ASM/Advanced WAF, Imperva, Akamai, ModSecurity (any one or more).
• Strong understanding of HTTP/HTTPS, web app architecture, REST APIs, and common attack patterns.
• Proven experience tuning WAF rules and balancing security vs. false positives.
• Experience with logging/monitoring and SIEM integrations.
• Scripting/automation skills: Powershell/Python/Bash (plus regex and JSON/YAML).
• Familiarity with CI/CD and Infrastructure-as-Code principles.
• Good troubleshooting and stakeholder communication skills.

About LE100 Zelis Healthcare India

Searching for “LE100 Zelis Healthcare India jobs” or “jobs at LE100 Zelis Healthcare India”? You’re in the right place.