IND Lead Engineer, Security - Web Application and API Protection Security Engineer

Overview

We are seeking a Web Application and API Protection (WAAP) Engineer to design, implement, and manage enterprise-scale protections for web applications and APIs. The role protects critical business services from evolving threats while enabling secure digital innovation.

What you'll do

• Provide operational support and maintenance for The Hartford’s enterprise WAF and API security platforms.
• Design, deploy, and maintain WAAP solutions including Threat Detection and Prevention, Vulnerability Detection and Prevention, Bot Management and Account Protection, and DoS mitigation technologies.
• Develop and manage security policies to protect web applications, mobile applications, and APIs from OWASP Top 10 and OWASP API Top 10 threats.
• Monitor, analyze, and respond to application-layer attacks, malicious bot activity, and API abuse.
• Conduct rule tuning, false-positive analysis, and security policy optimization.
• Support cloud-native WAAP deployments across environments such as AWS, Azure, and GCP.
• Create dashboards, metrics, and reports demonstrating security posture, attack trends, and risk reduction.
• Stay current on emerging web, API, and application security threats, vulnerabilities, and industry best practices.
• Participate in security incident response activities involving web applications and APIs.

What you'll need

• Bachelor's degree in Information Security, Computer Science, Cybersecurity, or related field, or equivalent experience.
• 3+ years of experience in application security, web security, network security, or a related cybersecurity role.
• Hands-on experience with WAAP technologies such as Akamai WAF & API Security, Apigee API Management, AWS WAF, and Google Cloud Armor.
• Strong understanding of OWASP Top 10.
• Strong understanding of OWASP API Security Top 10.
• Strong understanding of Authentication and Authorization, including OAuth2, OIDC, and SAML.
• Strong understanding of REST, GraphQL, and SOAP APIs.
• Strong understanding of TLS/SSL.
• Strong understanding of SPA, MPA and Web Application architectures.
• Experience with API discovery, API inventory management, and API security monitoring.
• Experience with SIEM, security monitoring, and log analysis platforms.

Nice to have

• Experience implementing enterprise WAF and API security programs.
• Knowledge of Secure Software Development Lifecycle (SSDLC) practices.
• Industry certifications such as CISSP or AWS Certified Security Specialty.

Details

• Location: Puppalaguda Village, India.