WAF Engineer – Information Security
- Location
- Atlanta, Georgia, United States
- Salary
- Not specified
- Company
- Akash pawar
Job description
• Role & Company / Project Overview Tekcommands is hiring an experienced WAF Engineer (Information Security) on a contract basis with strong hands-on expertise in Imperva Web Application Firewall (WAF) to protect internet-facing applications and APIs, manage security policies, troubleshoot incidents, and automate WAF configurations. • Key Responsibilities & Daily Duties - Design, implement, manage, and tune Imperva WAF security policies for web applications and APIs. - Configure WAF rules, exceptions, access controls, rate limiting, and bot protection. - Provide L3 support for WAF incidents, false positives, blocked requests, SSL/TLS issues, and connectivity problems. - Analyze web traffic, WAF events, and security logs to investigate threats and recommend mitigation strategies. - Protect applications against SQL injection, cross-site scripting (XSS), malicious bots, and DDoS attacks. - Support application onboarding, DNS configuration, SSL/TLS certificates, and origin connectivity. - Automate WAF configuration and policy management using Terraform, Imperva APIs, Python, or Bash. - Integrate WAF logs with SIEM platforms such as Splunk. - Collaborate with application, network, cloud, and security operations teams. - Maintain operational documentation, troubleshooting guides, and change management procedures. • Required Qualifications, Skills & Experience - 6–8 years of experience in information security, web application security, and WAF administration. - Strong hands-on experience with Imperva WAF and production security policy management. - Good understanding of OWASP Top 10, SQL injection, XSS, bot protection, and DDoS mitigation. - Experience with Terraform, APIs, and scripting using Python or Bash. - Knowledge of Splunk or other SIEM platforms. - Familiarity with AWS, Azure, or Google Cloud security services. - Strong understanding of HTTP/HTTPS, DNS, SSL/TLS, HTTP/2, and web application performance. - Experience with CI/CD pipelines, Git, and change management. - Preferred skills: Cloud security management, security incident management and troubleshooting, infrastructure automation, and WAF policy administration and optimization. • Working Hours, Shifts & Location Details Onsite contract position located in Atlanta, Georgia, United States. • Compensation & Benefits Not specified. • Application Instructions Please share updated profiles directly with the recruiter via email.