WAF Security Engineer

1 month ago


Bengaluru, India Shining Sheroes Full time

Programme Summary :

HSBC has a large volume of globally distributed internet web applications, and a larger volume of internal web applications, hosted across many countries and time zones. These web applications are hosted both in HSBC operated Datacentre and Cloud Service Provider environments.

The HSBC Web Application Firewall strategy is aiming to unify and deploy coherent, consistent, and uniform protection across the Bank for both internet and internal web applications, and in conjunction with other strategies.

Additionally, it is paramount to not only ensure that the technology is in-place and performing properly, but also that the people and processes are appropriate to ensure that HSBC is protected.

The role :

This role will play a critical role in enhancing our Web Application Firewall (WAF) across multiple solutions and applications and will be pivotal in crafting, testing, and implementing advanced WAF solutions.

This role involves a strong focus on developing robust security measures against web-based attacks, contributing significantly to the security posture of our organization and achieving audits.

Key Responsibilities :

- Develop and refine complex custom WAF rules and features, ensuring mitigation of Minimum Viable Product (MVP) and security posture gaps.

- Coding expertise to create effective testing mechanisms for baseline and custom WAF rules, integrating these tests seamlessly into automation pipelines.

- Offer subject matter expert (SME) support in various security testing areas, including WAF Proofs of Concept (PoCs)

- Provide specialized WAF-focused advice on web and API attack methodologies, evasions, and mitigation techniques, leveraging your ethical hacking background.

- Contribute to DevSecOps / DevOps with security testing expertise to enhance the automation aspects of the project.

Key Accountabilities :

- Utilize ethical hacking skills to safeguard the organization from web-based attacks, ensuring the protection of operations, reputation, and customer trust.

- Conduct in-depth technical evaluations of WAF solution rulesets, focusing on detection and prevention of web and API security threats.

- Develop custom WAF rules and features, addressing gaps and enhancing overall security measures.

- Identify and counter technical strategies that bypass WAF solutions.

- Design and implement testing protocols to evaluate the effectiveness of various security initiatives, including WAF rules and new features.

- Facilitate the integration of testing procedures into CI/CD pipelines

- Reverse-engineer attacker tactics to create effective mitigation rules.

- Maintain and secure essential documentation and reports, ensuring traceability and compliance.

- Inform the EPS Management team about emerging threats and vulnerabilities, recommending countermeasures.

- Communicate effectively with a range of stakeholders, providing updates on security-related matters

Ideal Candidate Profile :

- Strong background in ethical hacking

- Extensive experience with web-based attack methodologies, including knowledge of tools, payloads, exploits, and countermeasures.

- Proficient in web application and API security.

- Skilled in identifying and mitigating WAF/IPS/CSPM security vulnerabilities.

- Expertise in developing custom WAF rules and security testing packages.

- Solid understanding of OWASP top 10 vulnerabilities.

- Proficiency in at least one programming language

- Ability to automate security testing within CI/CD pipelines.

- Knowledgeable in networking, cloud firewalls, and web technologies.

- Strong grasp of DevSecOps principles and practices.

- Awareness of Agile methodologies

(ref:hirist.tech)
  • Security Engineer

    4 weeks ago


    Bengaluru, India Antal International Full time

    Responsibilities and Duties:- Architect, build, and support security platforms and tools leveraging robust software and systems engineering.- Collaborate with the engineering team and other teams to gather requirements, design solutions, and develop new capabilities.- Provide technical leadership and hands-on expertise as the founding member of a new...


  • Bengaluru, India Oracle Full time

    SaaS Security Product Test EngineerSaaS Security Testing Services team is seeking a test engineer to join Oracle India Development Center under the Oracle SaaS Cloud Security (SCS) organization. You will have the opportunity to contribute and help deliver security services and features for SaaS Enterprise customers and influence the future of testing and...


  • Bengaluru, India Oracle Full time

    SaaS Security Product Test Engineer SaaS Security Testing Services team is seeking a test engineer to join Oracle India Development Center under the Oracle SaaS Cloud Security (SCS) organization. You will have the opportunity to contribute and help deliver security services and features for SaaS Enterprise customers and influence the future of testing...


  • Bengaluru, India Amelia Full time

    Security Engineer - Elastic SearchRequirements:• The successful candidate must have a strong command of Elastic setup, operations, alerting, use case development & implementation, configuration, maintenance, optimization and reporting.• Real world security experience in the financial services (banking, brokerage & insurance), technology, government or...

  • Cloud Security

    4 weeks ago


    Bengaluru, Karnataka, India sonataOne Full time

    Engineering degree or equivalent qualification with 6-8 years of experience. - Understand identity concepts - SAML, JWT, Oauth etc. - Solid understanding of security concepts and tools - Certificates, DLP, WAF, SIEM, firewalls, DDOS prevention, IDS/IPS, privileged access management, Encryption, SSL, VPN, IPSec, TCP/IP, DNS and web security architecture...

  • Security Engineer

    1 month ago


    Bengaluru, India antal international network Full time

    Job Summary :As the first security engineer , you will help shape and deliver core infrastructure to power security capabilities.In this role, you will set the technical direction for building, owning, and operating security-critical software, platforms, tooling, frameworks, and libraries. Leveraging your deep backend engineering expertise, you will provide...


  • Bengaluru, India Halodoc Full time

    About This RoleHalodoc is looking for an individual who can adopt the mindset of an attacker to proactively identify security vulnerabilities and collaborate closely with cross-functional teams to promptly address them. This role involves taking charge of the end-to-end secure development requirements, discovering vulnerabilities and security...


  • Bengaluru, India Autodesk Full time

    Position OverviewOur Security Observability framework provides centralized visibility across Autodesk that enables us to better secure our Infrastructure and data. We are looking for an experienced Security Engineer who can design, build, engineer and mature our Security Observability/Logging framework and data engineering pipelines supporting Security...


  • Bengaluru, India RSA Security Full time

    RSA - Application Security Engineer Location: Remote India RSA offers mission-driven security solutions that provide organizations with a unified approach to managing digital risk that hinges on integrated visibility, automated insights and coordinated actions. RSA solutions are designed to effectively detect and respond to advanced attacks; manage...


  • Bengaluru, India RSA Security Full time

    Responsibilities • Work on any number of security and identity related areas and products • Build systems for detecting anomalous activities within the product • Develops and administers software engineering procedures and training for vulnerability scans and static code analysis • Analyse vulnerability report of various SCA and SAST scan tools...


  • Bengaluru, India Flipkart Full time

    About the team:The Security Standards team is a part of the central Information security function which is primarily responsible for security standards, secure configuration reviews, architecture reviews, validating efficacy and efficiency of the existing security controls, threat modeling, assessment of the various security controls / technologies based on...


  • Bengaluru, India Flipkart Full time

    About the team:The Security Standards team is a part of the central Information security function which is primarily responsible for security standards, secure configuration reviews, architecture reviews, validating efficacy and efficiency of the existing security controls, threat modeling, assessment of the various security controls / technologies based on...


  • Bengaluru, India eJAmerica Full time

    Job Description:Total -4+YearsMandatory-Illumio ExperienceResponsibilities:Firewall Management: Serve as the subject matter expert (SME) in Palo Alto Networks and Cisco ASA/FTD firewalls. Design, implement, and maintain firewall configurations, rules, and policies to ensure the security posture of the network infrastructure.PKI Management: Manage both public...


  • Bengaluru, India eJAmerica Full time

    Job Description:Total -4+YearsMandatory-Illumio ExperienceResponsibilities:Firewall Management: Serve as the subject matter expert (SME) in Palo Alto Networks and Cisco ASA/FTD firewalls. Design, implement, and maintain firewall configurations, rules, and policies to ensure the security posture of the network infrastructure.PKI Management: Manage both public...


  • Bengaluru, India IT Full time

    Job Description :- Familiarity with WAF tools for both on-premises and cloud applications.- Ability to fine-tune WAF configurations to bolster security measures.- Demonstrate background in cybersecurity and deep understanding of web application security practices.- Maintain web application firewall systems to protect our web applications against potential...


  • Bengaluru, India IT Full time

    Job Description : Responsibilities :Firewall Management : - Serve as the subject matter expert (SME) in Palo Alto Networks and Cisco ASA/FTD firewalls.- Design, implement, and maintain firewall configurations, rules, and policies to ensure the security posture of the network infrastructure.PKI Management : - Manage both public and internal Microsoft Public...


  • Bengaluru, India Flipkart Full time

    About the team: The Security Standards team is a part of the central Information security function which is primarily responsible for security standards, secure configuration reviews, architecture reviews, validating efficacy and efficiency of the existing security controls, threat modeling, assessment of the various security controls / technologies based...


  • Bengaluru, India Flipkart Full time

    About the team: The Security Standards team is a part of the central Information security function which is primarily responsible for security standards, secure configuration reviews, architecture reviews, validating efficacy and efficiency of the existing security controls, threat modeling, assessment of the various security controls / technologies based...


  • Bengaluru, India FICO Full time

    FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 90+ countries make better decisions. Join our world-class team today and fulfill your career potential!The Opportunity“As a part of FICO’s highly modern and innovative analytics and decision platform, the Cyber-Security Engineer will help shape the next generation...


  • Bengaluru, India THOUGHTSPOT INDIA PRIVATE LIMITED Full time

    Responsibilities: Define and execute the security posture for ThoughtSpot services running across multiple cloud and hybrid environments.Provide technical leadership, mentor team members, and lead initiatives across the R/D org across geographies.Experiment and drive technology decisions across multi-cloud environments - AWS, GCP, and private cloud.Architect...