📍 Job Overview

Job Title: Analyst IT Security II (IND) (Web Application Firewall Engineer (WAF Engineer) or Application Security Engineer (WAF))
Company: Elevance Health
Location: India, Bengaluru
Job Type: Full-Time Employee
Category: Cybersecurity, Web Application Security
Date Posted: June 11, 2025
Experience Level: 5-10 years
Remote Status: On-site

🚀 Role Summary

Web Application Security: Protect and secure web applications using Web Application Firewall (WAF) solutions.
Collaboration: Work closely with application security teams, security analysts, and leaders to ensure application security and compliance.
Problem-Solving: Analyze, troubleshoot, and resolve security events, web traffic disruptions, and network outages.
Adaptability: Manage multiple priorities and deliver technical projects in a fast-paced, large-scale organization.

📝 Enhancement Note: This role requires a strong background in web application security, with a focus on WAF solutions, to protect Elevance Health's web applications and ensure compliance with industry standards.

💻 Primary Responsibilities

Web Application Firewall (WAF) Management: Design, configure, deploy, and maintain WAF solutions for on-premise and cloud environments.
Security Event Analysis: Recognize, analyze, and respond to security events, and escalate as necessary.
Collaboration: Work with application developers, security teams, and other stakeholders to analyze and support WAF configurations and application remediation efforts.
Threat Mitigation: Develop, maintain, test, patch, and troubleshoot WAF rules/signatures to mitigate threats and implement best practices.
Network Security: Demonstrate understanding of network protocols, DNS, and other security concepts to support major security processes and products.

📝 Enhancement Note: The primary responsibilities of this role require a deep understanding of web application security, network protocols, and WAF solutions to ensure the security and compliance of Elevance Health's web applications.

🎓 Skills & Qualifications

Education: Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent years of experience as an Application Security Analyst/Engineer and WAF Security Engineer.

Experience:

Proven experience working in large organizations (25,000+) with competing projects and priorities.
Experience with large-scale application onboardings to WAF and/or migrations between WAF solutions.
Confidence leading triage calls for security events, web traffic disruptions, or network outages.

Required Skills:

Cybersecurity, privacy principles, threats, vulnerabilities, risk management, and IT security methods.
Network security architecture concepts and protocols, such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and IAM/directory services.
Experience working with industry standard WAF solutions like CloudFlare, Akamai, F5 Networks, Imperva, Fastly, etc.
Knowledge of Layer 7 security attacks and application security vulnerabilities (OWASP Top 10, SANS Top 25, XSS, SQLi, CMDi, RCE, CSRF/SSRF, CVEs, and CWEs, etc.).
Basic understanding of CDN and caching techniques, Load Balancing, and various cloud platforms (AWS, GCP, Azure, Oracle Cloud).

Preferred Skills:

Experience with gRPC and web sockets.
Familiarity with application security testing tools and methodologies.
Knowledge of DevOps practices and CI/CD pipelines.

📝 Enhancement Note: The required and preferred skills for this role emphasize a strong background in web application security, WAF solutions, and network protocols to ensure the security and compliance of Elevance Health's web applications.

📊 Web Portfolio & Project Requirements

Portfolio Essentials:

Demonstrate experience with WAF solutions, network protocols, and application security vulnerabilities.
Showcase projects that highlight your ability to configure, deploy, and maintain WAF solutions.
Include case studies that illustrate your problem-solving skills and ability to manage multiple priorities.

Technical Documentation:

Document your approach to WAF rule development, testing, and deployment.
Include examples of how you have mitigated security threats and implemented best practices.
Provide evidence of your understanding of network protocols, DNS, and other security concepts.

📝 Enhancement Note: The portfolio and project requirements for this role focus on demonstrating your expertise in web application security, WAF solutions, and network protocols to ensure the security and compliance of Elevance Health's web applications.

💵 Compensation & Benefits

Salary Range: INR 1,200,000 - 1,800,000 per annum (Estimated based on industry standards for a mid-level cybersecurity role in Bengaluru, India)

Benefits:

Extensive focus on learning and development opportunities.
An inspiring culture built on innovation, creativity, and freedom.
Holistic well-being programs.
Comprehensive health and medical insurance coverage.
Competitive rewards and recognition programs.
Best-in-class amenities and workspaces.
Policies designed with associates at the center.

Working Hours: Full-time, 40 hours per week, with flexible hours for deployment windows, maintenance, and project deadlines.

📝 Enhancement Note: The salary range and benefits for this role are estimated based on industry standards for a mid-level cybersecurity role in Bengaluru, India, with a focus on learning and development opportunities, well-being, and competitive rewards.

🎯 Team & Company Context

🏢 Company Culture

Industry: Healthcare, specifically focused on managed health care services and insurance.

Company Size: Large organization with over 25,000 employees.

Founded: Elevance Health was founded in 1986, with Carelon Global Solutions (CGS) becoming a subsidiary in 2023.

Team Structure:

The InfoSec team is a fast-paced, results-driven, multi-national organization.
The role reports to the Hiring Manager, Vikram Shah, within the InfoSec team.
The team collaborates with various stakeholders, including application security teams, security analysts, and leaders.

Development Methodology:

The team follows Agile methodologies, with a focus on delivering results and continuous improvement.
Collaboration and communication are key aspects of the development process.

Company Website: Elevance Health | Carelon Global Solutions

📝 Enhancement Note: The company culture at Elevance Health and Carelon Global Solutions emphasizes collaboration, innovation, and continuous improvement, with a focus on delivering results and ensuring the security and compliance of web applications.

📈 Career & Growth Analysis

Web Technology Career Level: Mid-level Web Application Security Engineer or WAF Engineer, with opportunities for growth into senior roles and technical leadership positions.

Reporting Structure: The role reports to the Hiring Manager, Vikram Shah, within the InfoSec team.

Technical Impact: The role has a significant impact on the security and compliance of Elevance Health's web applications, ensuring the protection of sensitive data and maintaining the organization's reputation.

Growth Opportunities:

Technical Skill Development: Expand your expertise in web application security, WAF solutions, and emerging security trends.
Technical Leadership: Develop your leadership skills by mentoring junior team members and contributing to the team's growth and success.
Architecture Decisions: Gain experience in making architecture decisions that impact the security and compliance of Elevance Health's web applications.

📝 Enhancement Note: The career and growth opportunities for this role focus on technical skill development, leadership, and architecture decisions, with a strong emphasis on web application security and WAF solutions.

🌐 Work Environment

Office Type: Modern, collaborative workspace with a focus on innovation, creativity, and freedom.

Office Location(s): Bengaluru, India, with global headquarters in Indianapolis, USA, and additional offices in Hyderabad, Gurugram, Manila, Limerick, and San Juan.

Workspace Context:

The workspace is designed to foster collaboration and communication between team members and stakeholders.
The team uses various tools and technologies to manage projects, track progress, and ensure security and compliance.
The work environment supports flexible hours and remote work arrangements, as needed.

Work Schedule: Full-time, 40 hours per week, with flexible hours for deployment windows, maintenance, and project deadlines.

📝 Enhancement Note: The work environment at Elevance Health and Carelon Global Solutions emphasizes collaboration, innovation, and flexibility, with a focus on supporting the team's growth and success.

📄 Application & Technical Interview Process

Interview Process:

Phone Screen: A brief phone call to assess your communication skills and cultural fit.
Technical Assessment: A hands-on technical assessment to evaluate your WAF and web application security skills.
On-site Interview: A face-to-face interview with the hiring manager and other team members to discuss your technical skills, problem-solving abilities, and cultural fit.
Final Decision: A final decision based on your technical skills, cultural fit, and alignment with the team's goals and objectives.

Portfolio Review Tips:

Highlight your experience with WAF solutions, network protocols, and application security vulnerabilities.
Include case studies that demonstrate your problem-solving skills and ability to manage multiple priorities.
Showcase your understanding of web application security best practices and industry standards.

Technical Challenge Preparation:

Brush up on your knowledge of WAF solutions, network protocols, and application security vulnerabilities.
Practice problem-solving exercises and case studies to demonstrate your technical skills and ability to manage multiple priorities.
Familiarize yourself with Elevance Health's company culture and values to ensure a strong cultural fit.

ATS Keywords: Web Application Firewall, WAF, Application Security, Cybersecurity, Network Protocols, DNS, IP, TCP, UDP, SSL/TLS, HTTP/HTTPS, Cloud Technologies, WAF Solutions, Application Security Vulnerabilities, Load Balancing, CDN, Threat Mitigation, Problem-Solving, Collaboration, Technical Leadership, Architecture Decisions.

📝 Enhancement Note: The application and technical interview process for this role focuses on assessing your technical skills in web application security, WAF solutions, and network protocols, as well as your problem-solving abilities and cultural fit.

🛠 Technology Stack & Web Infrastructure

Web Application Firewall (WAF) Solutions:

CloudFlare, Akamai, F5 Networks, Imperva, Fastly, and other industry-standard WAF solutions.

Network Protocols:

TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and IAM/directory services (Okta, Siteminder, Ping, LDAP).

Cloud Platforms:

AWS, GCP, Azure, and Oracle Cloud.

Web Application Security Vulnerabilities:

OWASP Top 10, SANS Top 25, XSS, SQLi, CMDi, RCE, CSRF/SSRF, CVEs, and CWEs.

Collaboration Tools:

Various tools and technologies used to manage projects, track progress, and ensure security and compliance.

📝 Enhancement Note: The technology stack and web infrastructure for this role focus on industry-standard WAF solutions, network protocols, cloud platforms, and web application security vulnerabilities, with a strong emphasis on ensuring the security and compliance of Elevance Health's web applications.

👥 Team Culture & Values

Web Development Values:

Leadership: Demonstrate strong leadership skills and the ability to make architecture decisions that impact the security and compliance of Elevance Health's web applications.
Community: Collaborate with team members, stakeholders, and other departments to ensure the security and compliance of web applications.
Integrity: Uphold the highest ethical standards and maintain the confidentiality and security of sensitive data.
Agility: Adapt to changing technologies, threats, and best practices to ensure the security and compliance of web applications.
Diversity: Embrace diversity in thoughts, ideas, and perspectives to drive innovation and continuous improvement.

Collaboration Style:

Cross-Functional Integration: Collaborate with various teams, including application security teams, security analysts, and leaders, to ensure the security and compliance of web applications.
Code Review Culture: Participate in code reviews and peer programming practices to ensure the quality and security of web applications.
Knowledge Sharing: Share your expertise and knowledge with team members and stakeholders to drive continuous learning and improvement.

📝 Enhancement Note: The team culture and values at Elevance Health and Carelon Global Solutions emphasize leadership, collaboration, integrity, agility, and diversity, with a strong focus on ensuring the security and compliance of web applications.

⚡ Challenges & Growth Opportunities

Technical Challenges:

Web Application Security: Stay up-to-date with emerging web application security trends, vulnerabilities, and best practices.
WAF Solutions: Continuously learn and adapt to new WAF solutions, features, and updates to ensure the security and compliance of Elevance Health's web applications.
Network Protocols: Deepen your understanding of network protocols, DNS, and other security concepts to support major security processes and products.
Threat Mitigation: Develop and implement effective threat mitigation strategies to protect Elevance Health's web applications from evolving security threats.

Learning & Development Opportunities:

Technical Skill Development: Expand your expertise in web application security, WAF solutions, and emerging security trends through training, workshops, and online courses.
Conference Attendance: Attend industry conferences, webinars, and events to network with other professionals, learn about emerging trends, and share your expertise.
Technical Mentorship: Seek mentorship opportunities from experienced team members and industry leaders to gain insights and guidance on your career development.

📝 Enhancement Note: The challenges and growth opportunities for this role focus on technical skill development, learning, and mentorship, with a strong emphasis on web application security, WAF solutions, and network protocols.

💡 Interview Preparation

Technical Questions:

Web Application Security: Demonstrate your understanding of web application security principles, vulnerabilities, and best practices.
WAF Solutions: Showcase your expertise in configuring, deploying, and managing WAF solutions to ensure the security and compliance of web applications.
Network Protocols: Explain your understanding of network protocols, DNS, and other security concepts to support major security processes and products.
Problem-Solving: Solve technical problems and case studies that demonstrate your ability to manage multiple priorities and make architecture decisions.

Company & Culture Questions:

Company Culture: Demonstrate your understanding of Elevance Health's company culture, values, and mission.
Web Application Security: Explain how you would ensure the security and compliance of Elevance Health's web applications using WAF solutions and other security measures.
Threat Mitigation: Describe your approach to threat mitigation and how you would protect Elevance Health's web applications from evolving security threats.

Portfolio Presentation Strategy:

WAF Solutions: Highlight your experience with WAF solutions, network protocols, and application security vulnerabilities.
Case Studies: Include case studies that demonstrate your problem-solving skills and ability to manage multiple priorities.
Technical Deep Dive: Provide a technical deep dive into your approach to WAF configuration, deployment, and management, as well as your understanding of web application security best practices and industry standards.

📝 Enhancement Note: The interview preparation for this role focuses on assessing your technical skills in web application security, WAF solutions, and network protocols, as well as your problem-solving abilities and cultural fit.

📌 Application Steps

To apply for this Web Application Firewall Engineer (WAF Engineer) or Application Security Engineer (WAF) position at Elevance Health:

Customize Your Portfolio: Highlight your experience with WAF solutions, network protocols, and application security vulnerabilities, with a focus on problem-solving skills and architecture decisions.
Optimize Your Resume: Tailor your resume to emphasize your technical skills, problem-solving abilities, and cultural fit for this role.
Prepare for Technical Challenges: Brush up on your knowledge of WAF solutions, network protocols, and application security vulnerabilities, and practice problem-solving exercises and case studies.
Research Elevance Health: Familiarize yourself with Elevance Health's company culture, values, and mission to ensure a strong cultural fit.

⚠️ Important Notice: This enhanced job description includes AI-generated insights and web technology industry-standard assumptions. All details should be verified directly with the hiring organization before making application decisions.

23946-31619-Backfill- Analyst Infra Security I (IND)