Expert Engineer – Application & Endpoint Security

About the role

The Expert Engineer – Application & Endpoint Security will lead the implementation, configuration, monitoring, and maintenance of Web Application Firewalls (WAF) for both internal and external customers. You will work closely with other cybersecurity teams to protect web applications from OWASP Top 10 attacks and other threats, ensuring robust security posture across the organization.

Key responsibilities

• Deploy, configure, and fine‑tune WAF solutions, defining protection scopes and creating tailored security profiles for each web application.
• Monitor WAF performance, resource utilization, and license status, raising alerts for any anomalies.
• Conduct regular security assessments, audits, and backup restoration drills to validate WAF effectiveness.
• Collaborate with SOC/Incident Response to provide attack logs and support investigations.
• Plan and execute WAF upgrades, patches, and corrective actions while minimizing impact on live traffic.
• Maintain comprehensive documentation (HLD, LLD, policies, application owners) for all WAF deployments.

Required profile

• Minimum 6 years of experience in WAF administration and web application security.
• BS in Computer Science, Information Technology, or a related field.
• Certified Ethical Hacker (CEH) or equivalent certification preferred.

Required skills

• WAF administration and F5 WAF troubleshooting.
• Deep knowledge of OWASP Top 10 vulnerabilities and common attack vectors.
• Understanding of network protocols, firewall technologies, and web server platforms.
• Proficiency with scripting languages for automation (e.g., Python, PowerShell).
• Experience integrating WAF with SIEM, PAM, RSA, SolarWinds, and other security controls.