Specialist-IT & Information Security_2541 WAF

A Level 2 Specialist maintains a good knowledge of the threat landscape, helps enhance current techniques and provides support in the identification of new methods of detecting threats. He performs detailed analysis of security events, using analytical skills and advanced knowledge of IT security and network threats. Expect to have basic cloud knowledge, working with API's, Basic and Hands-on experience on Akamai cloud platform.\n\n100%\n\nPART 3\nDuties and Responsibilities\nList in order of importance and state approximate weightage accorded to each.\n\nAlert handling: Analyze and tune security alerts and interpret security events which may led to incidents\nIncident Response activities: Identify, investigate and respond to potential security incidents in order to minimize the operational and organizational impact\nPolicy fine-tuning and maintain the current policies: Actively pursue abnormal activity on assets and new attack trends and fine tune the policies accordingly in order to tighten the security.\n\n30\nThreat Intelligence: Leverage various threat intelligence sources and capabilities to enable intelligence driven response\nApplication Onboarding : Onboard applications based on the customer requirement and ensure business continuity and service availability\n\n20\nAPI: knowledge in API's.\nExperience with cloud WAF would be an advantage.

Like Akamai, Imperva.\nKnowledge in Scripting. Like Python, Shell, etc.\nKnowledge in terraform or any automation software would be an added advantage.\n20\nForensics: Perform forensic analysis on memory, disk, and other system and network artifacts to identify indicators of compromise.\nIdentify Gaps: Investigate and document gaps in controls, event data, and work with internal teams to resolve\nProcess Improvement: Execute, develop and document Incident Handling Guides and processes.\n\n10\n\nPART 4\nQualification, Experience, Technical and Functional Skills\n\nAt least 4 to 5 years of experience handling Network Security , Incident Response , knowledge and Hands on experience on WAF or any Reverse proxy Layer 7 security appliance. Other skill sets include;\nOWASP top 10\nKnowledge of networking protocols such as HTTP, SSL, FTP, DNS etc.

and good idea about OSI layer and packet flow\nKnowledge of Syslog and SNMP monitoring tools\nBasic Linux knowledge\nBasic knowledge in cloud technologies\nITIL knowledge and service management skills would be a plus\nBasic understanding and Knowledge on Automation tools and software.\n\nPART 5\nKey Competencies\n\nIncident Response to WAF events\nMitigation of violations and attacks\nPolicy fine-tuning\nITIL\nDeveloping WAF incident response plans\nDevelop, maintain, test and troubleshoot WAF appliance as well as ruleset\nOnboarding an existing application to the WAF\nFrequent review of the WAF statistics and attack trend with the customers\n\nAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer. We are united by a shared commitment: to put our customers first and at the center of everything we do.

Their needs inspire our thinking and guide our actions. Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future - for our customers and for the world around us.\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture.

We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.\nGreat to have you on board. Let's care for tomorrow.\nNote: Having different strengths, experiences, perspectives and approaches is an integral part of Allianz' company culture. One means to achieve this is a regular rotation of Allianz employees across functions, Allianz entities and geographies.

Therefore, Allianz expects from its employees a general openness and a high motivation to regularly change positions and collect experiences across Allianz Group.\n]]>