WAF Security Engineer

As Barracuda WAF deployment is on AWS and applications are hosted in AWS, it is mandatory to have hands-on experience with AWS in a production environment.\nKey Responsibilities:\n• Configure, manage, and optimize Barracuda WAF and AWS WAF to protect web applications.\n• Troubleshoot HTTP session issues and analyze traffic logs to identify and mitigate security threats.\n• Develop and maintain custom WAF rules based on application security requirements.\n• Implement and refine content rules to filter and manage web traffic effectively.\n• Ensure WAF rules align with OWASP Top 10 security standards to mitigate vulnerabilities such as SQL injection, XSS, CSRF, and others.\n• Set up and configure new WAF deployments, ensuring best security practices.\n• Implement high availability (HA) configurations to enhance reliability and failover mechanisms.\n• Collaborate with application development and security teams to ensure seamless integration of security measures.\n• Monitor and respond to WAF alerts, providing timely resolutions for security incidents.\n• Conduct regular audits and performance tuning of WAF configurations to optimize security and efficiency.\n• Work extensively with AWS services to support Barracuda WAF deployment and application hosting.\n\nRequired Skills & Experience:\n• 3+ years of hands-on experience with Barracuda WAF and AWS WAF.\n• Mandatory hands-on experience with AWS in a production environment.\n• Strong knowledge of HTTP/S protocols, session management, and web traffic analysis.\n• Experience in writing WAF rules (custom rules, rate limiting, bot protection, etc.).\n• Understanding of OWASP Top 10 security risks and mitigation techniques.\n• Expertise in troubleshooting application security issues using logs, packet captures, and debugging tools.\n• Experience in configuring high availability (HA) and disaster recovery (DR) solutions for WAF environments.\n• Familiarity with cloud security best practices, particularly within AWS.\n• Strong analytical and problem-solving skills.\n• Knowledge of endpoint security is an added advantage.\n• Excellent communication and documentation skills.\n\nPreferred Qualifications:\n• Certifications such as AWS cloud certificate (any), Barracuda WAF Certified Engineer\n• Hands-on experience with SIEM tools (Splunk) and integrating WAF logs for monitoring.\n• Knowledge of API security and protection strategies.\n\nThanks & Regards,\nRamya.R\nTalent Acquisition Executive\n_______________________________________\nIdexcel Technologies Pvt Ltd\nAn ISO 27001: 2022 certified Organization\nCrystal Plaza, 9-11, Bhuvanappa Layout, Hosur Main Road, Bengaluru - 560029\n080-2550 8830 / M: 7019642915\n\nhttp://www.idexcel.com