Analyst - Web Application Firewall (WAF)

About the role

Levi Strauss & Co. is hiring a Cybersecurity professional specializing in Web Application Firewall (WAF) and automated fraud/bot management, threat mitigation, and ecommerce security. The role involves analyzing, configuring, and optimizing WAF solutions to protect web applications against threats such as SQL injection, cross-site scripting (XSS), and Distributed Denial of Service (DDoS) attacks, while collaborating with cross-functional teams to enhance security postures and ensure compliance with industry standards. The position is based at the GCC Office – ITC Green Center in Bengaluru, Karnataka, India, and follows a full-time schedule from 9:00 PM IST to 6:00 AM IST.

What you’ll do

• Analyze, configure, and optimize WAF solutions to protect web applications against threats such as SQL injection, cross-site scripting (XSS), and DDoS attacks
• Perform threat analysis and incident response activities
• Mitigate OWASP Top 10 vulnerabilities through security policies and ruleset configuration
• Collaborate with cross-functional teams to enhance security postures while ensuring compliance with industry standards and best practices
• Develop custom security rules to mitigate credential stuffing and other attack types for enterprise applications
• Manage automated fraud and bot protection systems
• Work with SIEM tools for security monitoring and analysis
• Ensure compliance with security frameworks such as ISO 27001, NIST, and PCI-DSS

What you’ll bring

• Experience implementing WAF configurations to reduce false positives
• Experience developing custom security rules to mitigate credential stuffing and other attack types for enterprise applications
• Strong analytical and problem-solving abilities
• Effective communication and documentation skills
• Ability to work in fast-paced, security-sensitive environments
• Collaboration and teamwork across IT security domains
• Knowledge of Web Application Firewalls (Akamai, Cloudflare, AWS, etc.)
• Familiarity with BOT protection and automated fraud prevention (Akamai, F5 preferred)

Nice to have

• Experience with BOT protection and automated fraud prevention using Akamai or F5
• Familiarity with SIEM tools such as Google Security Operations, Splunk, or QRadar
• Knowledge of security compliance frameworks including ISO 27001, NIST, and PCI-DSS

Skills

Benefits

• Complimentary preventive health check-up for you and your spouse
• OPD coverage
• Best in class leave plan including paternity and family care leaves
• Counselling sessions to prioritize mental well-being
• Exclusive discount vouchers on Levi's products