LT
Job Description
- Assist in safeguarding the organization and its clients against internet-based threats that could significantly impact the company's operations, reputation, and clientele.
- Perform in-depth analyses and technical assessments of various Web Application Firewall (WAF) solution rulesets and functionalities to ensure compliance with established baselines and enhance the detection of web API and other traffic-related security risks.
- Develop custom rules and features as necessary to strengthen WAF solutions in order to meet the established baseline.
- Detect and address technical circumventions and evasion tactics related to WAF solutions.
- Design and implement testing packages to evaluate the effectiveness of various initiatives, including WAF Proofs of Concept, managed and custom rules, new features, and solutions.
- Promote the automation of effectiveness testing protocols and their integration into Continuous Integration/Continuous Deployment (CI/CD) pipelines.
- Engage in DevSecOps and pipeline development projects.
- When required, reverse-engineer attacker exploits and payloads to create mitigation rules.
- Ensure prompt and accurate review and action on all WAF tuning requests.
- Conduct thorough log analyses to effectively identify and mitigate false positives, ensuring optimized WAF rules.
- Maintain comprehensive and up-to-date documentation for all WAF tuning procedures, policies, and configurations.
- Develop and propose customized WAF policies and rules tailored for various applications and environments.
- Proactively spot and resolve false positives to improve overall WAF accuracy.
- Collaborate efficiently with cross-functional teams to seamlessly integrate WAF solutions into the existing security framework.
- Provide expert advice on WAF configurations based on best practices and current security requirements.
- Carry out regular evaluations and audits of WAF configurations to uphold an optimal security posture and comply with industry standards.
- Stay updated on the latest web security threats, vulnerabilities, and trends to ensure continuous improvement of WAF effectiveness.
- Ideal Candidate Profile
- Extensive background in WAF management, tuning, and engineering, with a solid grasp of web application security principles.
- Demonstrated history of proactively identifying and resolving false positives to enhance WAF performance.
- Experience in SOC or CSIRT and AppSec or Ethical Hacking, showcasing hands-on expertise for the primary responsibilities.
- Proficient in log analysis tools and techniques, with the ability to discern patterns and anomalies in web traffic.
- Familiarity with tools such as Splunk, Wireshark, or custom scripts for processing and analyzing logs.
- Experience with at least three major WAF solutions (e.g., Akamai, F5, AWS, GCP) and an understanding of their distinct configurations and capabilities.
- Strong analytical and problem-solving abilities, with a keen attention to detail.
- Exceptional communication skills, capable of conveying complex security concepts to both technical and non-technical audiences.
- Ability to develop, test, and recommend WAF policies and rules customized for specific applications and environments.
- Experience collaborating with cross-functional teams to integrate WAF solutions into the current security infrastructure.
- Competence in maintaining thorough documentation for WAF tuning procedures, policies, and configurations.
- In-depth experience in configuring WAF solutions to align with best practices and security requirements.
- A proactive, detail-oriented professional who excels in a dynamic, fast-paced environment and remains informed about the latest web security threats and trends.