Senior Information Security Analyst
Core
Operate, monitor, and continuously improve enterprise Imperva WAF and API Security (WAAP) services, acting as the technical SME for API and web application protection.
Role type
Senior Information Security Analyst (API/WAF Security)
Builds
Scalable API and web application security capabilities using Imperva, ServiceNow, and SOAR platforms
Domain
Cybersecurity, API Security, Web Application Firewall (WAF)
Required skills
Imperva Solutions (WAF/API Security), Python, PowerShell, Bash, ServiceNow, SIEM/SOAR, TCP/IP, HTTP/S, SSL/TLS, Change Management, Incident Response, KPI Tracking
Preferred skills
Terraform, OWASP API Top 10, AI Protection, DLP, CASB, Email Security SaaS
Technologies
Imperva, ServiceNow, Splunk, Tines, Torq, Terraform
Responsibilities
Operate and maintain Imperva management console (Cloud Console/on-prem MX), including user management, site onboarding, and license management. Execute continuous discovery of REST, GraphQL, gRPC, and SOAP endpoints to identify shadow APIs and unmanaged endpoints. Design, implement, and tune Imperva security policies, profiles, and rules to minimize false positives and block attacks. Automate ingestion of Imperva findings into ServiceNow and integrate with SOAR platforms to reduce manual effort. Act as L2/L3 escalation point for Imperva-related events and incidents. Define and track operational security KPIs (MTTR, FP rate, protection coverage) and produce periodic reports. Lead technical design reviews and mentor junior analysts on Imperva operations and API security best practices.
Seniority
Senior, hands-on IC
