Web Application Firewall (WAF) & Network Security Engineer

Position Overview This role focuses on supporting, deploying, and maintaining enterprise Web Application Firewall (WAF) products and security infrastructure. Primary responsibilities include managing application layer security technologies (Akamai Kona, F5 ASM/AWAF, Salt API Protection) with opportunities to expand into broader network security areas like Network Access Control (NAC) and traditional Firewalls., * Operations & Support: Handle day-to-day operations, monitoring, and expert-level troubleshooting for enterprise WAF platforms (F5 and Akamai).

• Architecture & Engineering: Perform architecture and engineering responsibilities to support existing security infrastructure and implement new security projects.
• Maintenance & Auditing: Conduct regular health checks, performance checks, and user activity audits across security applications.
• Documentation: Author and vigilantly maintain detailed documentation covering design, purpose, operational procedures, and management of security systems.
• Developer Collaboration: Analyze application logs and collaborate directly with development teams to ensure secure coding practices are enforced.
• Incident Response: Participate in on-call rotations and maintain a flexible schedule for security incident resolution.

• Experience: Minimum 8 years of hands-on experience deploying and maintaining enterprise WAF solutions (Akamai Kona, F5 ASM/AWAF, and Salt API Protection).
• Network Security: Deep understanding of application layer (TCP/IP Layer 7) security fundamentals.
• Troubleshooting Skills: Proficient with network protocols, CLI commands, and running/analyzing packet captures.
• Education: Bachelor’s degree in Information Systems, Computer Science, or a related field.

Soft Skills & Operational Requirements

• Communication: Excellent written and verbal communication skills; comfortable interacting with personnel across all organizational levels.
• Business Acumen: Ability to comprehend business imperatives and translate them into technical security requirements.
• Client Focus: Strong customer service mindset, with a track record of managing expectations effectively and building long-term relationships.
• Flexibility: Willingness to maintain a flexible work schedule and handle on-call duties for incident escalation.

Preferred / Bonus Skills

• Scripting and automation experience using Python or PowerShell to streamline repetitive tasks.

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, lea…