WAF Engineer

Monitor and analyze Cloudflare and Akamai WAF alerts, logs, and dashboards for advanced threat detection. Perform initial triage to classify alerts into true positives and false positives. Conduct deep-dive analysis of web application attacks including SQL Injection, XSS, RCE, bot attacks, and API abuse. Analyze WAF logs to identify potential threats and validate rule triggers against known attack patterns. Manage firewall HA configuration and troubleshooting. Escalate confirmed or high-risk incidents to L2/L3 teams with supporting evidence. Support WAF rule tuning by identifying false positives/negatives and execute predefined playbooks for common web attacks. Ensure WAF platform health, uptime, and alerting mechanisms are functioning. Support onboarding of new applications into WAF and ensure proper protection policies are applied. Maintain incident documentation, ticket updates, and reporting records. Coordinate with AppSec, SOC, and network teams for incident resolution and tuning. Gain exposure to DDoS protection mechanisms and rate-limiting strategies.