Security Architect

Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Web Application Firewall (WAF) Good to have skills : NA Minimum 5 year(s) of experience is required Educational Qualification : 15 years full time education Summary: We are seeking a highly skilled WAF and Firewall Security Expert to manage Web Application Firewalls (WAF) and network perimeter security. The ideal candidate will have in-depth knowledge of Akamai, Tencent,Cloudflare, and similar WAF/CDN platforms, along with a strong grasp of application layer (Layer 7) attacks, web security vulnerabilities, and real-world mitigation strategies. You will play a key role in defending critical applications from threats such as SQL injection, XSS, CSRF, RCE, API abuse, bot attacks, and more ensuring the security and resilience of our digital platforms. Roles & Responsibilities: -WAF Policy Management: Administer Web Application Firewall (WAF) rule sets and policies using industry-leading platforms such as Akamai Kona Site Defender, Cloudflare WAF, AWS WAF, or similar solutions. -Bot management monitoring and response -Threat monitoring and investigation -Dark web intelligence review and escalation -Attack response support -Operational reporting and security analysis -Application Layer Defense: Analyze, detect, and defend against a wide range of OWASP Top 10 and other Layer 7 threats, including: -SQL Injection (SQLi) -Cross-Site Scripting (XSS) -Remote Code Execution (RCE) -Cross-Site Request Forgery (CSRF) -HTTP protocol abuse -Malicious bot traffic and API abuse Professional & Technical Skills: -Firewall & Network Security: Deploy and manage network firewalls and integrate them with other security technologies including Intrusion Detection/Prevention Systems (IDS/IPS) and DDoS mitigation tools. - Bot Protection Expertise: Strong understanding of automated bot attacks, with hands-on experience in detection and defense strategies using behavioral analytics, CAPTCHA, rate limiting, and JavaScript challenges. -Threat Monitoring & Incident Response: Proactively monitor and respond to threats across both application and network layers, leveraging SIEM tools and real-time alerting systems. - Cross-Functional Collaboration: Work in close partnership with DevOps, development, and security teams to enforce secure deployment practices and ensure robust application configurations. -WAF Tuning & Optimization: Perform continual WAF tuning, including signature refinement and custom rule development, to ensure an optimal balance between security coverage and application functionality. -Threat Intelligence & Research: Stay current on emerging application-layer attack vectors, tools, and adversary tactics to inform proactive defense measures. -Incident Handling: Participate in incident response, including threat hunting, forensic analysis, and contributing to post-mortem investigations to enhance organizational resilience. Additional Information: - The candidate should have minimum 3 years of experience in Web Application Firewall (WAF). - This position is based at our Bengaluru office. - A 15 years full time education is required. 15 years full time education Important Notice We have been alerted to the existence of fraudulent messages asking job seekers to set up payment to cover various costs associated with establishing employment at Accenture. No one is ever required to pay for employment at Accenture. If you are contacted by someone asking for payment, please do not respond, and contact us at india.fc.check@accenture.com immediately. Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Please read Accenture’s Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process.