WAF Engineer - Information Security

Tasks

• Design, implement, and manage Imperva WAF security policies to protect internet-facing web applications and APIs.
• Configure and continuously tune Imperva WAF rules, security policies, and exceptions to mitigate threats while minimizing false positives and business impact.
• Provide Level 3 support for WAF-related incidents and operational issues, including troubleshooting blocked requests, application access issues, SSL/TLS errors, and connectivity problems.
• Analyze web traffic, WAF events, and security logs to identify malicious activity, investigate incidents, and recommend appropriate mitigation measures.
• Configure and manage protections for common web application threats, including SQL injection, cross-site scripting, malicious bots, and distributed denial-of-service (DDoS) attacks.
• Support application onboarding to Imperva WAF, including DNS configuration, SSL/TLS certificate management, origin connectivity, and validation of security policies.
• Use infrastructure-as-code tools, particularly Terraform, and Imperva APIs t

Requirements

• At least 7 years of hands-on experience in web application security, with a significant focus on WAF administration and security policy management.
• Extensive experience with Imperva WAF, including configuring, managing, and tuning security policies for production applications.
• Experience creating and managing WAF rules and exceptions, access controls, rate-limiting policies, and bot protection controls, as applicable to the deployed Imperva products.
• Strong understanding of web application vulnerabilities and attack vectors, including the OWASP Top 10, SQL injection, cross-site scripting, and DDoS attacks.
• Experience troubles

How to apply

• Send resumes by email.

Location

• ONSITE Atlanta, GA