Designation
Senior Information Security Analyst
Job Description
Implementation and management of Imperva/ F5 Web Application Firewall (WAF) to protect web applications, including rule creation, policy management, policy fine-tuning, and threat detection and mitigation. Expertly design, implement, and manage complex WAF rules and policies using Imperva/ F5 tools to protect web applications against evolving threats, ensuring minimal false positives. Continuously optimize WAF configurations, including Imperva/ F5 settings, to enhance security effectiveness while maintaining peak application performance. Handling, identifying, and responding to faults arising across AWS/Azure cloud. Determining possibilities of implementation of various features and deployment of new technologies. Engaging Tshoot Bridge in case of legitimate traffic blocking by security policy. Integration of security tools with SIEM and SOC tools. Performing assessments of new technology implementations. Analyzing system logs to identify security issues. Responding to security incidents. Creating and implementing security policies and procedures. Performing regular security scans of systems and networks. Providing security training to employees. Supervising training sessions and professional meetings to develop or maintain professional knowledge. Knowledge of IDS/IPS, firewall analysis, and vulnerability scanning. Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM) - Any of these certifications is considered an advantage. Demonstrated problem-solving capabilities, and ability to manage complex security requirements. Self-motivated, directed and well-organized, with the ability to see projects through to closure. Strong understanding of enterprise networking (host-based firewalls, anti-malware, IDS/IPS, proxy, WAF), Windows and Unix/Linux systems operations, TCP / IP protocols, experience providing analysis and trending of security log data. Thread intelligence, vulnerability, malware details sharing/exchanging ecosystem. 