GCP Cloud WAF Engineer

GCP Cloud WAF Engineer
Company: A leading global IT services and consulting MNC
Location: Pune / Mumbai / Bangalore / Chennai / Hyderabad / Noida
Experience: 6–10 Years
Open Positions: 1
Notice Period: Immediate to 15 Days preferred
Role Purpose
We are looking for an experienced GCP Cloud WAF Engineer to support cloud and web application security initiatives. The candidate will work with business, cloud, cybersecurity, vendor, and DevSecOps teams to implement and maintain Web Application Firewall (WAF) solutions, manage security requests, and improve security automation.
Mandatory Skills
Strong experience in Web Application Firewall (WAF) solutions across cloud, edge, and on-premises environments.
Hands-on experience with GCP Cloud Security and native security controls.
Experience with Akamai or Cloudflare WAF; knowledge of F5 WAF and DDoS protection.
Strong understanding of web application attacks, security principles, and mitigation techniques.
WAF tuning, configuration, custom rules, exception handling, and false-positive analysis.
Experience with security log analysis and investigation of WAF-related incidents.
Understanding of networking, HTTPS inspection, TLS termination, and certificate management.
Knowledge of rate limiting, access control, and WAF version management.
Experience supporting DevSecOps automation pipelines.
Ability to analyze security logs, troubleshoot connectivity issues, and document security configurations.
Key Responsibilities
Implement, configure, and maintain WAF solutions for internet-facing and internal web applications.
Develop custom WAF rules and handle exceptions, false positives, and baseline policy updates.
Review WAF logs and support security incident investigations with SOC/CSIRT teams.
Coordinate with cloud platform teams, vendors, business stakeholders, and change management teams.
Handle new WAF requests, service issues, and implementation activities.
Maintain and improve DevSecOps automation pipelines and identify further automation opportunities.
Review security configurations, identify risks, prepare status reports, and escalate issues when required.
Maintain technical documentation and follow Agile delivery practices.
Preferred Skills
Background in Cybersecurity, Information Security, SOC, or CSIRT.
Experience with security or infrastructure projects.
Strong stakeholder management, analytical, and communication skills.
Ability to work independently and contribute to team objectives.
Candidates with hands-on WAF engineering experience and strong security log analysis skills are preferred.

Work arrangement
Hybrid