Web Application firewall Specialist - Lead

Key Responsibilities 1. WAF Policy Management Create, configure, and manage F5 WAF policies to protect web applications from OWASP Top 10 vulnerabilities (SQL injection, XSS, CSRF). Develop and enforce WAF security policies, procedures, and guidelines. 2. Web Application Profile Creation & Fine-Tuning Create and configure new web application profiles to ensure optimal security and performance. Continuously monitor and fine-tune WAF policies to minimize false positives and negatives. 3. OWASP Top 10 Vulnerability Management Stay up-to-date with OWASP Top 10 vulnerabilities and implement necessary WAF configurations. Collaborate with development teams to remediate vulnerabilities in web applications. 4. Security Event Monitoring & Incident Response Monitor WAF logs and security events to detect and respond to potential incidents. Investigate security incidents and provide recommendations for remediation. 5. Configuration Management & Version Control Manage WAF configuration changes, including version control, backups, and recovery procedures. Ensure configurations align with industry best practices and organizational standards. 6. Performance Optimization & Troubleshooting Optimize WAF performance to ensure minimal impact on application availability. Troubleshoot WAF-related issues and liaise with F5 support and development teams. 7. Compliance & Reporting Generate WAF security reports to demonstrate compliance with regulatory requirements (PCI-DSS, HIPAA). Provide metrics and insights to stakeholders. 8. Collaboration & Knowledge Sharing Work with cross-functional teams (development, network, security) to ensure WAF effectiveness. Share knowledge and best practices with team members. 9. F5 WAF Product Maintenance & Upgrades Perform WAF software upgrades, patches, and configuration changes. Ensure configurations follow F5 best practices and recommendations. 10. Continuous Improvement & Training Stay updated with F5 WAF product updates, new features, and industry trends. Participate in training and certification programs to maintain WAF expertise. Certification F5-301 / F5-303 or other industry-leading OEM professional-level certifications. Preferred Technical Experience Application Centric Infrastructure (ACI) deployment and data center experience. Experience designing and implementing Software Defined Networks (SDN) and large complex networks. Knowledge of protocols and technologies such as BGP, OSPF, MP-BGP EVPN, VXLAN, VPC.