Sr Administrator (Support & Operations)

Job description

L2 Web Application Security Engineer (FortiWeb WAF - Primary | Position Title L2 Security Engineer - FortiWeb WAF Location Noida Experience Required 4-6 Years Employment Type Full-Time Position Summary We are looking for an experienced L2 Security Engineer with strong hands-on expertise in Fortinet FortiWeb (Web Application Firewall) as the primary The candidate will be responsible for day-to-day operations, incident handling, troubleshooting, change implementation, policy administration, performance monitoring, and security management of enterprise web application security and cloud security environments. The role requires interaction with application teams, infrastructure teams, and security operations teams to ensure secure and uninterrupted business operations. Key Responsibilities Key Responsibilities FortiWeb WAF Administration (Primary Skill) • Provide L2 operational support for FortiWeb Web Application Firewall environments, Monitor WAF alerts, logs, and security events. • Configure and maintain: o Web Protection Profiles, Server Policies, URL Access Policies, IP Reputation and Geo-IP Controls, Bot Mitigation Policies o API Protection Policies ,SSL Offloading , HTTP/HTTPS Security Policies, Virtual Patching Rules • Monitor and tune WAF signatures to reduce false positives, Support application onboarding activities, Assist application teams with troubleshooting blocked transactions, Validate and implement approved firewall and WAF changes, Support firmware upgrades and patching activities, Generate reports and security dashboards. Required Technical Skills Primary Skill (Mandatory) FortiWeb WAF • FortiWeb Administration , WAF Policy Management, Attack Signature Management, SSL Certificate Management, Reverse Proxy Architecture • Protect web applications against: o OWASP Top 10 attacks o SQL Injection (SQLi) o Cross-Site Scripting (XSS) o CSRF o File Inclusion Attacks o Command Injection o Bot Attacks o Credential Stuffing • Configure: o Web Protection Profiles o Signature-Based Protection o Machine Learning Profiles o API Security o Bot Mitigation o Rate Limiting • Traffic Analysis and Log Interpretation, WAF Troubleshooting • Monitor WAF alerts, logs, and security events. • Analyze attack patterns and identify false positives. • Investigate security incidents and provide remediation recommendations. • Support P1/P2 incident handling and root cause analysis. Networking Knowledge Required Candidates should possess good understanding of: • TCP/IP, Routing and Switching Fundamentals, DNS, DHCP, HTTP/HTTPS, Protocols, SSL/TLS Certificates, Load Balancers, Reverse Proxy Concepts, VPN Technologies, Authentication Protocols , Network Traffic Analysis Monitoring & Troubleshooting Skills Experience with: • Packet Capture Analysis, Browser Developer Tools, FortiAnalyzer, Syslog Analysis, SIEM Integration, Event Log Analysis, SSL Handshake Troubleshooting, Application Access Troubleshooting Required Experience • 4-6 years of Information Security or Network Security experience, Minimum 3 years of hands-on experience with FortiWeb WAF Experience supporting production environments, Experience handling incidents and change requests, Familiarity with ITIL processes. Skill Requirements Preferred Skills • FortiAnalyzer, FortiGate Firewall Administration, Azure Security ,AWS Security, Web Application Security Testing, Linux Administration ,REST APIs • Scripting (PowerShell/Python), SIEM Platforms (Microsoft Sentinel, Splunk, QRadar) Certifications (Preferred) Fortinet: NSE4 and Equivalent certifications in WAF Soft Skills • Strong troubleshooting and analytical skills., Excellent verbal and written communication., Ability to work with application owners and business users., Customer-focused mindset, Strong documentation skills, Ability to work independently and in shifts if required, Team collaboration and stakeholder management skills. Typical L2 Activities • Investigate website blocking issues, Analyze FortiWeb attack logs and false positives, Support new application onboarding, Handling certificate issues, generate weekly and monthly operational reports, Coordinate with vendors for issue resolution. Key Performance Indicators (KPIs) • Incident Resolution SLA Compliance, Change Success Rate, Mean Time to Resolve (MTTR), Application Availability, Security Policy Compliance, Audit Findings Closure, Customer Satisfaction (CSAT), Knowledge Base Contributions Ideal Candidate Profile The ideal candidate is a hands-on L2 Security Engineer with practical experience managing FortiWeb WAF environments, capable of troubleshooting application security issues, tuning WAF policies, supporting web application teams Other Requirements NA Apply now Information at a Glance Why HCLTech? At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first. HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion. Disclaimer Privacy Statement Terms of use Sitemap Raise a Grievance We use cookies on our site. Please read more about cookies policy here. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Opens in a new tab. Copyright © 2026 HCL Technologies Limited Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: "route" is used for session stickiness "careerSiteCompanyId" is used to send the request to the correct data center "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another Cookies from provider SAPasserviceprovider are required and cannot be turned off Functional Cookies These cookies provide a better customer experience on this site, such as by remembering your login details, optimizing video performance, or providing us with information about how our site is used. You may freely choose to accept or decline these cookies at any time. Note that certain functionalities that these third-parties make available may be impacted if you do not accept these cookies. Consent to all Functional Cookies Functional Cookies Provider Description Enabled Vimeo Vimeo is a video hosting, sharing, and services platform focused on the delivery of video. Opting out of Vimeo cookies will disable your ability to watch or interact with Vimeo videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider Vimeo YouTube YouTube is a video-sharing service where users can create their own profile, upload videos, watch, like, and comment on videos. Opting out of YouTube cookies will disable your ability to watch or interact with YouTube videos. Cookie Policy Privacy Policy Terms and Conditions Consent to cookies from provider YouTube Advertising Cookies These cookies serve ads that are r