Cyber Security Analyst - L4

Job Description

• This role will play a critical role in enhancing our Web Application Firewall (WAF) across multiple solutions and applications and will be pivotal in crafting, testing, and implementing advanced WAF solutions. 
• The ideal candidate will have previously worked with the Akamai platform, although working with at least two major WAF vendors such as F5, AWS, GCP, is also key
• The successful candidate will monitor and review tuning requests, proactively assist with identifying false positives and provide expert recommendations to ensure optimal protection and performance.  This will require staying up to date with the latest web security threats and platform enhancements. 

͏

Key Accountabilities

• Ensuring alignment with capability lead and control owner to deliver consistent WAAP policies across multiple infrastructures.
• Ensuring timely and accurate review and action on all WAF tuning requests.
• Conducting thorough log analyses to effectively identify and mitigate false positives, ensuring optimized WAF rules.
• Maintaining comprehensive and up-to-date documentation for all WAF tuning procedures, policies, and configurations.
• Developing and recommending tailored WAF policies and rules for various applications and environments.
• Proactively identifying and addressing false positives to enhance overall WAF accuracy.
• Collaborating effectively with cross-functional teams to integrate WAF solutions seamlessly into existing security infrastructure.
• Collaborating effectively with application teams to enable WAF protection across HSBC.
• Ensuring connectivity to origin servers on premise only comes through Akamai to prevent direct to origin attacks.
• Providing expert recommendations for WAF configurations based on best practices and current security requirements.

͏

Ideal Candidate Profile

• Extensive experience in WAF management, tuning, and engineering, with a strong understanding of web application security principles.
• Proven track record of proactively identifying and mitigating false positives to optimize WAF performance.