Santander

Global retail and commercial banking group

WAF Specialist

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeNo salary listed

About the Job

Requirements

Knowledge of international standards, including ISO 27002 and NIST 800-53.
Experience managing security policies, updating signatures, and analyzing events.
Ability to configure custom rules and exceptions.
Knowledge of WAF tools and solutions, including appliances, cloud WAF, and WAF as a Service.
English proficiency.

Responsibilities

Monitor web traffic to detect malicious activity and vulnerabilities.
Detect, record, block, and report suspicious activity.
Configure and maintain WAF security policies, update signatures, and manage risk groups.
Protect internet-exposed assets using validated WAF solutions.
Inspect traffic in-line before it reaches application servers.
Apply manufacturer- and Global Protect-recommended policies, first in alert mode and then in denial mode based on events.
Configure custom rules, manage certificates, filter false positives, control access rates, and manage block lists.
Ensure coverage of OWASP Top 10 risks and HTTP Layer 7.
Collaborate with delivery teams and CISO to manage the platform and security perimeter.
Document specific considerations and ensure segregation of duties in network security changes.

CONSULTOR WAF SECURITY- SDS QROCountry: Mexico

Santander Digital Services esta buscando: Especialista WAF.

Ubicación:

CTOS Querétaro, opcional Santa Fe Reforma 490.

Responsabilidades y funciones:

Monitorear el tráfico web para detectar actividades maliciosas y vulnerabilidades.
Detectar, registrar, bloquear y reportar actividad sospechosa
Configurar y mantener políticas de seguridad del WAF, actualizar firmas y gestionar grupos de riesgo.
Proteger activos expuestos a Internet mediante soluciones WAF validadas.
Inspeccionar tráfico en modo en línea antes de llegar al servidor de aplicaciones
Aplicar políticas recomendadas por el fabricante y Global Protect, primero en modo alerta y luego en modo denegación según eventos
Configurar reglas personalizadas, gestionar certificados, filtrar falsos positivos, controlar la tasa de acceso y gestionar listas de bloqueo
Garantizar cobertura de riesgos OWASP Top 10 y capa 7 HTTP
Colaborar con equipos de entrega y CISO para la gestión de la plataforma y el perímetro de seguridad
Documentar consideraciones específicas y asegurar segregación de funciones en cambios de seguridad de red .

Conocimientos y habilidades requeridas:

Conocimiento de estándares internacionales (ISO 27002, NIST 800-53).
Experiencia en gestión de políticas de seguridad, actualización de firmas y análisis de eventos.
Capacidad para configurar reglas personalizadas y excepciones.
Habilidad para trabajar con equipos multidisciplinarios.
Conocimiento de herramientas y soluciones WAF (appliance, cloud, WAFaaS).
Ingles

About the Company

Santander

Global retail and commercial banking group

Santander is a global bank focusing on retail and commercial banking in Europe and the Americas, serving individuals and SMEs with regional franchises and a broad consumer finance arm, plus a Corporate & Investment Banking division for multinational clients. It uses its Gravity cloud platform to migrate core banking and rapidly deploy digital services such as Openbank across markets, combining fintech-style agility with a bank's balance sheet. The bank differentiates itself by marrying a large retail footprint with global CIB capabilities under the One Santander verticals model to boost efficiency and cross-border revenue. Its goals include improving returns on tangible equity and financing the green economy through sustainable finance and renewable energy projects.

Company size: 10,001+
Company stage: IPO
Headquarters: Boadilla del Monte, Spain
Founded: 1902

Recently Posted Jobs

Explore more opportunities at Santander

See more jobs