Web Application firewall Specialist - Lead

Key Responsibilities

1. WAF Policy Management

• Create, configure, and manage F5 WAF policies to protect web applications from OWASP Top 10 vulnerabilities (SQL injection, XSS, CSRF).
• Develop and enforce WAF security policies, procedures, and guidelines.

2. Web Application Profile Creation & Fine-Tuning

• Create and configure new web application profiles to ensure optimal security and performance.
• Continuously monitor and fine-tune WAF policies to minimize false positives and negatives.

3. OWASP Top 10 Vulnerability Management

• Stay up-to-date with OWASP Top 10 vulnerabilities and implement necessary WAF configurations.
• Collaborate with development teams to remediate vulnerabilities in web applications.

4. Security Event Monitoring & Incident Response

• Monitor WAF logs and security events to detect and respond to potential incidents.
• Investigate security incidents and provide recommendations for remediation.

5. Configuration Management & Version Control

• Manage WAF configuration changes, including version control, backups, and recovery procedures.
• Ensure configurations align with industry best practices and organizational standards.

6. Performance Optimization & Troubleshooting

• Optimize WAF performance to ensure minimal impact on application availability.
• Troubleshoot WAF-related issues and liaise with F5 support and development teams.

7. Compliance & Reporting

• Generate WAF security reports to demonstrate compliance with regulatory requirements (PCI-DSS, HIPAA).
• Provide metrics and insights to stakeholders.

8. Collaboration & Knowledge Sharing

• Work with cross-functional teams (development, network, security) to ensure WAF effectiveness.
• Share knowledge and best practices with team members.

9. F5 WAF Product Maintenance & Upgrades

• Perform WAF software upgrades, patches, and configuration changes.
• Ensure configurations follow F5 best practices and recommendations.

10. Continuous Improvement & Training

• Stay updated with F5 WAF product updates, new features, and industry trends.
• Participate in training and certification programs to maintain WAF expertise.

Certification

• F5-301 / F5-303 or other industry-leading OEM professional-level certifications.

Preferred Technical Experience

• Application Centric Infrastructure (ACI) deployment and data center experience.
• Experience designing and implementing Software Defined Networks (SDN) and large complex networks.
• Knowledge of protocols and technologies such as BGP, OSPF, MP-BGP EVPN, VXLAN, VPC.