Security Engineer WAF & SSLO (L3)

Make An Impact With Ntt Data

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it's a place where you can grow, belong and thrive.

Education*: BE/B-Tech/BCA or master's degree in CS/IT

Certification*: CCNA/CCNP Sec + OEM F5 Certification F5-CA or F5-301 (2 certifications)

Experience*: 6-8 years' relevant experience.

Technology (OEM): F5 BIG-IP (LTM, ASM), (HTTP/HTTPS, REST APIs), (OWASP Top 10, DDoS).

Skills: F5 BIG-IP LTM, Advanced WAF, and SSLO, understanding of web application security and OWASP Top 10

Job Summary

The L3 WAF and SSL Orchestration Engineer will be a senior technical expert responsible for the design, implementation, and advanced support of our Web Application Firewall (WAF) and SSL Orchestration (SSLO) solutions. The ideal candidate will have extensive experience in a large-scale banking or financial services environment, with a deep understanding of network security, regulatory compliance, and application delivery. This role requires expertise in protecting mission-critical web applications from advanced threats and ensuring the secure and seamless inspection of encrypted traffic.

Key Responsibilities

• Serve as the L3 escalation point for critical incidents related to F5 WAF, SSLO, and other BIG-IP modules.
• Configure, tune, and maintain F5 Advanced WAF (formerly ASM) policies to protect against OWASP Top 10 vulnerabilities and other application-layer threats.
• Implement and manage F5 BIG-IP SSL Orchestrator (SSLO) for traffic decryption and steering to security devices.
• Manage configurations for F5 BIG-IP platforms, including virtual servers, profiles, and iRules, and perform upgrades and patching.
• Coordinate with F5 support (TAC) and other OEMs for technical assistance, Return Merchandise Authorization (RMA), and reconfiguration.
• Perform root cause analysis (RCA) on complex security incidents and recommend preventive measures.
• Troubleshoot and resolve complex application traffic anomalies, security violations, and connectivity issues.
• Investigate and resolve WAF incidents by analyzing packet captures using tools like Wireshark.
• Maintain network and security architecture diagram and review and update the based-on changes. Further, proper maintenance for LLD and HLD for each solution and regular update of the same.
• Provide the suggestions for any enhancements/changes that can enhance the security posture and/or add business value to the delivery framework.
• Develop and document standard operating procedures and runbooks for incident response related to WAF & SSLO events.
• Shall analyze incidents independently & identify root cause and act for containment and remediation.
• Provides engineering analysis and architectural design of technical solutions
• Sound analytical and troubleshooting skills
• Good Team Management and co-ordination skills

On-site Working

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, color, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.