• Strong WAF Engineer Profile with hands-on Akamai Kona Site Defender troubleshooting and policy-tuning depth • Important (Experience 1): Must have 3.5+ years in Network Security / Web Application Security, with hands-on Akamai WAF (Kona Site Defender) experience — policy tuning, configuration, and troubleshooting. • Important (Experience 2): Must have experience monitoring and analyzing WAF events, logs, and alerts to detect and mitigate web attacks, with strong incident troubleshooting and RCA of recurring WAF incidents. • Important (Tech skill 1): Must have strong knowledge of OWASP Top 10, web threats, and mitigation techniques (staying current with CVEs), plus proficiency in HTTP/HTTPS, TLS, DNS, and TCP/IP. • Important (Tech skill 2): Must have experience in policy configuration, false-positive tuning, and custom rule creation, with familiarity with Akamai Control Center (Luna Portal), API integrations, and a good understanding of CDN, reverse proxy, caching, and load balancing. • Important (Experience 3): Must have experience onboarding new applications/services into the Akamai WAF platform (ruleset design and deployment), collaborating with application, DevOps, and security teams to validate and optimize protection policies. • Important (Experience 4): Must have experience handling incident management and escalation to L3 / vendor support, supporting change management (policy updates, upgrades, patching), and maintaining SOPs, runbooks, and documentation. • Important (Skill): Must have ITIL process knowledge (Incident / Change / Problem Management) and experience working with compliance / audit teams to meet WAF security standards. • Important (Education): Must have a Bachelor's degree in Computer Science, IT, or a related field. • Important (Domain): Banking-industry experience Primary; strong candidates with the same technical experience from another industry are acceptable. • Important (Note): Must be comfortable with a 24/7 NOC rotational shift environment at the client site (IDFC Bank, Airoli, Navi Mumbai), able to work in a fast-paced • Primary (Certification): Akamai WAF Certified Professional; other security certifications (CEH, GIAC, etc.). • Primary (Other WAFs / Skills): Experience with other WAFs (Cloudflare, AWS WAF, F5 ASM, Imperva, FortiWeb); scripting/automation (Python, Shell, REST APIs); SIEM tools (Splunk, QRadar, ELK) for WAF log analysis; Bot Manager, API Security, or DDoS protection