Web Application and DDoS Security Admin Imperva CWAF SME

Job Summary The Web Application & DDoS Security Administrator will administer, maintain, and optimize web application security and DDoS protection solutions supporting public-facing applications, APIs, and web platforms. The role requires deep hands-on expertise with Imperva Cloud WAF (CWAF), WAF policy management, DDoS mitigation, and web application and API security, while balancing security, performance, and business requirements in a fast-paced environment. Key Responsibilities Administer and maintain Imperva Cloud WAF (CWAF) and DDoS protection platforms. Manage advanced security controls, including Bot Management, API Security, Client-Side Protection, and Account Takeover (ATO) Prevention. Implement, monitor, and tune WAF policies, rules, and security signatures. Execute security-related changes, service requests, and incident response activities. Partner with application, infrastructure, and security teams to design and implement web security controls. Evaluate applications, APIs, networks, and hosting environments and recommend security improvements. Troubleshoot complex application security, network security, and web performance issues. Support ongoing security reviews, vulnerability remediation, and compliance initiatives. Required Qualifications Hands-on experience with Imperva Cloud WAF (CWAF) and DDoS mitigation technologies. Strong knowledge of web application security and API security. Strong understanding of HTTP/S, DNS, TCP/IP, and networking concepts. Knowledge of web hosting and application architectures. Experience analyzing and tuning WAF rules and security policies. Strong troubleshooting and problem-solving skills across application and network security domains. Ability to communicate effectively with both technical and non-technical stakeholders. Preferred Qualifications Experience with AWS, Azure, or Google Cloud. Knowledge of DevSecOps and modern web application architectures. Experience balancing security, performance, and business requirements in a fast-paced environment. Certifications CISSP, Security+, CEH, GIAC, or equivalent security certification. Education: Bachelors Degree Certification: CISSP , Security+ , CEH , GIAC