WAF Engineer - Information Security(Cloud Security Management)

LIVEMINDZ SERVICES INC
Atlanta, GA, United States
5 days ago
Apply on www.dice.com
Prepare application

Role details

Contract type
Contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
7 years minimum
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Amazon Web Services Application Performance Management Microsoft Azure Bash Shell Cloud Computing Security Configuration Management Cyber Security System Configuration Continuous Integration Domain Name System (DNS) Hypertext Transfer Protocols (HTTP)
+21 more
Python (Programming Language) Network Protocols Open Web Application Security Web Application Security Security Information and Event Management SQL Injection Systems Integration Web Applications Scripting Google Cloud Caching Git Low Latency Cross Site Scripting Web Technologies Terraform Ddos Splunk Software Version Control Vulnerability Analysis Programming Languages

Requirements

  1. At least 7 years of hands-on experience in web application security, with a significant focus on WAF administration and security policy management. 2.Extensive experience with Imperva WAF, including configuring, managing, and tuning security policies for production applications. 3.Experience creating and managing WAF rules and exceptions, access controls, rate-limiting policies, and bot protection controls, as applicable to the deployed Imperva products. 4.Strong understanding of web application vulnerabilities and attack vectors, including the OWASP Top 10, SQL injection, cross-site scripting, and DDoS attacks. 5.Experience troubleshooting false positives, blocked requests, application availability, and WAF-related performance issues. 6.Understanding of internet-facing application performance, including latency, caching, HTTP/2, and TLS. 7.Hands-on experience with Terraform and familiarity with Imperva APIs for configuration management and automation. 8.Experience analyzing security logs and integrating WAF events with SIEM platforms such as Splunk. 9.Proficiency in at least one scripting or programming language, such as Python or Bash, for automation and analysis. 10.Experience with public cloud platforms such as AWS, Azure, or Google Cloud and their native security services. 11.Familiarity with CI/CD pipelines, change management, and version control systems such as Git. 12.Strong understanding of network protocols and web technologies, including HTTP/HTTPS, SSL/TLS, and DNS.”

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com
Prepare application

Good distractions

Loading talks and stories from around this role…