CYBER SECURITY ANALYST L4

jobColumnOne" role="region" aria-labelledby="jobColumnOneRegion" style="width:65%;"> Job Description

Apply now

•

Apply Now

•

Start applying with LinkedIn

Start

•

GCP WAF / Cloud Armor ImplementationDesign, deploy, and maintain Google Cloud Armor security policies for applications behind External HTTP(S) Load Balancers Implement preconfigured WAF rules based on OWASP ModSecurity CRS (SQLi, XSS, LFI, RFI, RCE, protocol attacks) Configure custom security rules, IP allow/deny lists, geo‑blocking, and adaptive protection Apply WAF policies to workloads hosted on GKE, Cloud Run (Serverless NEG), Managed Instance Groups, and App EngineWAF Tuning & Traffic AnalysisAnalyze Cloud Armor logs to identify false positives and false negatives Tune CRS sensitivity levels, rule priorities, and regex patterns Move rules from preview / log‑only mode to enforcement mode safely Work with application teams to troubleshoot legitimate traffic blocksAutomation & DevSecOpsAutomate WAF deployments using Terraform (IaC) and gcloud CLI Integrate WAF controls into CI/CD pipelines as part of DevSecOps Maintain version‑controlled security policies and policy‑as‑code standardsSecurity Operations & MonitoringIntegrate Cloud Armor logs with SIEM platforms (Cloud Logging, Chronicle, Splunk, Sentinel, etc.) Support application‑layer DDoS mitigation and incident response Develop and maintain runbooks, SOPs, and operational documentation Collaborate with SOC, Network Security, and Platform teamsGovernance & ComplianceEnsure WAF configurations align with enterprise security baselines and Zero Trust architecture Support audit and compliance requirements (PCI DSS, SOC 2, ISO 27001, RBI / BFSI standards as applicable)Required Skills & Experience Must‑Have SkillsHands‑on experience with Google Cloud Armor (GCP WAF) Strong knowledge of OWASP Top 10 and web attack patterns Experience protecting workloads behind External HTTP(S) Load Balancers Expertise in WAF tuning, false‑positive reduction, and traffic inspection Terraform / Infrastructure‑as‑Code for security policy automation Understanding of HTTP/HTTPS, REST APIs, TLS, DNSNice‑to‑Have SkillsExperience with multi‑cloud WAFs (AWS WAF, Azure WAF, Cloudflare, Akamai) Exposure to IDS/IPS, bot protection, API security Scripting using Python or Bash Familiarity with SIEM and SOC workflowsGCP Services & TechnologiesGoogle Cloud Armor (WAF & DDoS) External HTTP(S) Load Balancer GKE, Cloud Run, Compute Engine Cloud Logging & Monitoring Terraform, gcloud CLI CI/CD tools (GitHub, GitLab, Azure DevOps, etc.)Certifications (Preferred)Google Professional Cloud Security Engineer CISSP / CCSP (Nice to have)

͏

͏

Mandatory Skills: GCP Security Services . Experience: 5-8 Years . Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.

Apply now

•

Apply Now

•

Start applying with LinkedIn

Start

•