Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Find Jobs
Find Jobs Near You – Available Work in Your Location
Skip to job details
CI
Compunnel, Inc.
Web Application and DDoS Security Admin Imperva CWAF SME
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
77
out of 100
Average of individual scores
Job Description
Job Summary The Web Application & DDoS Security Administrator will administer, maintain, and optimize web application security and DDoS protection solutions supporting public-facing applications, APIs, and web platforms. The role requires deep hands-on expertise with Imperva Cloud WAF (CWAF), WAF policy management, DDoS mitigation, and web application and API security, while balancing security, performance, and business requirements in a fast-paced environment. Key Responsibilities
- Administer and maintain Imperva Cloud WAF (CWAF) and DDoS protection platforms.
- Manage advanced security controls, including Bot Management, API Security, Client-Side Protection, and Account Takeover (ATO) Prevention.
- Implement, monitor, and tune WAF policies, rules, and security signatures.
- Execute security-related changes, service requests, and incident response activities.
- Partner with application, infrastructure, and security teams to design and implement web security controls.
- Evaluate applications, APIs, networks, and hosting environments and recommend security improvements.
- Troubleshoot complex application security, network security, and web performance issues.
- Support ongoing security reviews, vulnerability remediation, and compliance initiatives. Required Qualifications
- Hands-on experience with Imperva Cloud WAF (CWAF) and DDoS mitigation technologies.
- Strong knowledge of web application security and API security.
- Strong understanding of HTTP/S, DNS, TCP/IP, and networking concepts.
- Knowledge of web hosting and application architectures.
- Experience analyzing and tuning WAF rules and security policies.
- Strong troubleshooting and problem-solving skills across application and network security domains.
- Ability to communicate effectively with both technical and non-technical stakeholders. Preferred Qualifications
- Experience with AWS, Azure, or Google Cloud.
- Knowledge of DevSecOps and modern web application architectures.
- Experience balancing security, performance, and business requirements in a fast-paced environment. Certifications
- CISSP, Security+, CEH, GIAC, or equivalent security certification.