Full Time Web Application Firewall (WAF) Engineer Jobs, salary up to SGD 5,500 in MAVENTREE TECHNOLOGY PTE. LTD. - Maukerja

The successful candidate will maintain security platforms, monitor the health of security controls, coordinate remediation with stakeholders, and prepare operational reports and dashboards. They will also assist in troubleshooting firewall, WAF, and network security issues as needed.

Key Responsibilities :

• Administer, maintain, and support on-premises firewalls, cloud-based network security controls, and related security infrastructure, including policy implementation, rule reviews, software upgrades, patching, and lifecycle management. 

• Perform health monitoring, preventive maintenance, and operational support for firewall platforms to ensure optimal performance, availability, and security. 

• Execute firewall policy changes, troubleshoot firewall-related issues, and resolve network connectivity issues arising from security configurations and policies. 

• Configure, administer, and maintain Web Application Firewall (WAF) platforms, including policy deployment, rule management, policy tuning, signature updates, virtual patching, false-positive reviews, and ongoing operational support. 

• Monitor and analyse firewall, WAF, and security monitoring logs to identify operational issues, suspicious activities, and potential security concerns, escalating issues where necessary. 

• Monitor SIEM agent health across servers, coordinate with stakeholders to resolve issues, onboard new systems, and perform completeness checks to validate log coverage. 

• Support SIEM operations, including log onboarding, data source integration, log coverage validation, alert monitoring, dashboard maintenance, and operational support. 

• Develop and maintain security dashboards, reports, and operational metrics using SIEM and security management tools to support operational monitoring and management reporting. 

• Monitor and track security alerts generated from securityplatforms and coordinate with relevant stakeholders to ensure timely investigation and remediation. 

• Manage the end-to-end Vulnerability Management lifecycle, including vulnerability assessments, remediation tracking, consolidation of remediation status, stakeholder follow-up, and preparation of management reports. 

• Review vulnerability assessment findings affecting infrastructure and web applications and collaborate with stakeholders to implement remediation measures or compensating controls through firewall and WAF technologies where appropriate. 

• Assist in periodic reviews of firewall and WAF policies, configurations, logs, and rule bases, and prepare operational reports and recommendations for stakeholders. 

• Provide troubleshooting and operational support to resolve issues relating to firewall policies, WAF configurations, network security controls, and security monitoring platforms. 

• Create and maintain technical documentation, including network diagrams, security configurations, operational procedures, system inventories, and support documentation. 

• Work closely with infrastructure, application, and project teams to implement and maintain cybersecurity controls and operational requirements. 

16. Support daily security operations activities, including security monitoring, alert tracking, vulnerability management follow-up, and operational coordination with stakeholders. 

Requirements :

•  Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related discipline. 

Experience : 

•  Minimum 2 to 5years of experience in cybersecurity operations, network security administration, or security engineering. 

•  Experience with Palo Alto Networks firewall administration (i.e PCNSA) and Splunk certifications will be an added advantage.

•  Experience administering or supporting Web Application Firewall (WAF) technologies. 

•  Experience with SIEM platforms such as Splunk, Microsoft Sentinel, Q Radar, ArcSight, or equivalent log management and monitoring solutions. 

•  Experience invulnerability management, including vulnerability assessments, remediation tracking, and reporting, will be an added advantage.

Technical Skills :

•  Good understanding of network security concepts, including TCP/IP, routing, switching, NAT, DNS,VPN, ARP, and network segmentation. 

•  Familiarity with network troubleshooting and packet analysis tools such as Wireshark and tcpdump. 

•  Ability to analyse firewall, WAF, and SIEM logs for troubleshooting and operational investigations. Understanding of web application security concepts and common web application threats. 

•  Familiarity with security technologies such as firewalls, IPS, WAF, web proxies, SIEM platforms, and cloud security controls. 

•  Familiarity with cloud security concepts and cloud-native network security controls will be advantageous. 

Preferred Certifications :

•  Relevant certifications in Palo Alto Networks, Splunk, or Microsoft Sentinel will be advantageous.

•  CompTIA Security+. 

•  ISC2 CC, SSCP,CISSP, or equivalent cybersecurity certifications. 

Personal Attributes :

•  Strong analytical and troubleshooting skills. 

•  Good stakeholder management and communication skills. 

• Strong organisational, reporting, and coordination capabilities. 

•  Ability to work independently and collaboratively within a team environment. 

•  Proactive, detail-oriented, and able to manage multiple operational priorities effectively.