Security Operations Engineer
Core
Technical lead for administering, optimizing, and continuously improving the Web Application and API Protection (WAAP) platform to protect web applications and APIs from cyber threats.
Role type
Senior IC Security Operations Engineer (WAAP/WAF)
Builds
Web application and API protection capabilities (WAF, bot mitigation, DDoS controls)
Domain
Cybersecurity / Web Application Security
Required skills
WAF administration, API security, web application security concepts, HTTP/S traffic analysis, incident response, security policy configuration, SIEM/SOAR integration, cloud platforms (AWS/Azure/GCP), scripting/automation (Python/PowerShell)
Preferred skills
Imperva WAAP/WAF experience, bot mitigation technologies, DDoS protection technologies, industry certifications (CISSP, Security+, GSEC, GWAPT, CCSP, AZ-500, AWS Security Specialty)
Technologies
Imperva WAAP, WAF, SIEM, SOAR, AWS, Azure, Google Cloud, Python, PowerShell, REST APIs, OAuth, JWT
Responsibilities
Administering and optimizing the WAAP platform including WAF, API security, bot protection, and DDoS mitigation; Monitoring and analyzing application traffic to identify and mitigate security threats; Configuring and tuning WAF policies, security rules, signatures, and exceptions; Partnering with development and infrastructure teams to securely onboard new applications and APIs; Reviewing security events and logs to investigate suspicious activity and support incident response; Conducting security assessments of web applications and APIs; Developing and maintaining operational documentation and configuration standards; Integrating WAAP technologies with security monitoring platforms; Participating in change management and testing security policy updates.
Seniority
Senior, hands-on IC
