[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-ind-lead-engineer-security-web-application-and-api-protection-security-engineer-hartford-global-services-private-limited-de-in":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":11,"featured_until":7,"is_active":12,"deactivated_at":7,"is_enriched":12,"processed_job_posting_json":13,"processed_latitude":90,"processed_longitude":91,"processed_employment_types":92,"processed_working_hours":93,"processed_working_hours_labels":95,"processed_home_office":96,"processed_salary_min":87,"processed_salary_max":88,"processed_salary_currency":84,"processed_salary_source":97,"processed_benefits":98,"processed_benefits_labels":99,"processed_industry":100,"processed_skills":7,"processed_job_location":101,"processed_full_address_gmaps":103,"processed_street_gmaps":105,"processed_city_gmaps":106,"processed_postal_code_gmaps":107,"processed_country_gmaps":108,"processed_country_iso_code_gmaps":110,"full_description":16,"formatted_description":111,"processed_employment_types_labels":34,"processed_home_office_labels":32,"processed_industry_labels":36,"processed_it_skills":112,"processed_it_skills_labels":115,"processed_soft_skills":116,"processed_soft_skills_labels":117,"processed_job_expertise_skills":118,"processed_job_expertise_skills_labels":119,"processed_language_requirements":120,"processed_total_experience_years":113,"processed_professional_field":127,"processed_professional_field_labels":129,"processed_leadership_role":12,"processed_date_posted":19,"raw_job_url":130,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":100,"canonical_industry_label":36,"max_cpc":131,"actual_cpc":7},88182,"ind-lead-engineer-security-web-application-and-api-protection-security-engineer-hartford-global-services-private-limited","IND Lead Engineer, Security - Web Application and API Protection Security Engineer",null,{"name":9,"slug":10,"logo_url":7},"Hartford Global Services Private Limited","hartford-global-services-private-limited",false,true,{"@context":14,"@type":15,"title":6,"description":16,"hiringOrganization":17,"datePosted":19,"validThrough":20,"jobLocation":21,"jobLocationType":32,"employmentType":33,"industry":35,"skills":37,"baseSalary":82},"https:\u002F\u002Fschema.org\u002F","JobPosting","IND Lead Engineer, Security - GCC041 We’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future. Job Posting: Web Application and API Protection (WAAP) Engineer Overview We are seeking a highly skilled Web Application and API Protection (WAAP) Engineer to join our Information Security team. This role is responsible for designing, implementing, and managing enterprise-scale protections for web applications and APIs. The ideal candidate will have deep expertise in web application security, API security, web application firewalls (WAF), bot mitigation, DoS protection, and modern cloud-native security architectures. As a WAAP Engineer, you will work closely with application development, cloud engineering, network security, and cybersecurity teams to protect critical business services from evolving threats while enabling secure digital innovation. Key Responsibilities Provide operational support and maintenance for The Hartford’s enterprise WAF and API security platforms Design, deploy, and maintain WAAP solutions including Threat Detection and Prevention Vulnerability Detection and Prevention Bot Management and Account Protection DoS mitigation technologies Develop and manage security policies to protect web applications, mobile applications, and APIs from OWASP Top 10 and OWASP API Top 10 threats Monitor, analyze, and respond to application-layer attacks, malicious bot activity, and API abuse Conduct rule tuning, false-positive analysis, and security policy optimization Support cloud-native WAAP deployments across environments such as AWS, Azure, GCP Create dashboards, metrics, and reports demonstrating security posture, attack trends, and risk reduction Stay current on emerging web, API, and application security threats, vulnerabilities, and industry best practices Participate in security incident response activities involving web applications and APIs Required Qualifications Bachelor's degree in Information Security, Computer Science, Cybersecurity, or related field (or equivalent experience) 3+ years of experience in application security, web security, network security, or a related cybersecurity role Hands-on experience with WAAP technologies such as Akamai WAF & API Security Apigee API Management AWS WAF Google Cloud Armor Strong understanding of OWASP Top 10 OWASP API Security Top 10 Authentication and Authorization (OAuth2, OIDC, SAML) REST, GraphQL, and SOAP APIs TLS\u002FSSL SPA, MPA and Web Application architectures Experience with API discovery, API inventory management, and API security monitoring Experience with SIEM, security monitoring, and log analysis platforms Preferred Qualifications Experience implementing enterprise WAF and API security programs Knowledge of Secure Software Development Lifecycle (SSDLC) practices Industry certifications such as: CISSP AWS Certified Security Specialty About Us | Our Culture | What It’s Like to Work Here Every day, a day to do right. Showing up for people isn’t just what we do. It’s who we are – and have been for more than 200 years. We’re devoted to finding innovative ways to serve our customers, communities and employees—continually asking ourselves what more we can do. Is our policy language as simple and inclusive as it can be? Can we better help businesses navigate our ever-changing world? What else can we do to destigmatize mental health in the workplace? Can we make our communities more equitable? That we can rise to the challenge of these questions is due in no small part to our company values that our employees have shaped and defined. And while how we contribute looks different for each of us, it’s these values that drive all of us to do more and to do better every day. About Us Our Culture What It’s Like to Work Here Perks & Benefits Legal Notice Accessibility Statement Producer Compensation EEO Privacy Policy California Privacy Policy Your California Privacy Choices International Privacy Policy Canadian Privacy Policy Unincorporated Areas of LA County, CA (Applicant Information) MA Applicant Notice Hartford India Prospective Personnel Privacy Notice Electronic Monitoring Policy",{"@type":18,"name":9},"Organization","2026-10-07","2027-10-07",[22],{"@type":23,"address":24,"geo":28},"Place",{"@type":25,"addressLocality":26,"addressCountry":27},"PostalAddress","Hyderabad","IN",{"@type":29,"latitude":30,"longitude":31},"GeoCoordinates",17.3982116,78.3748513,"ONSITE",[34],"PERMANENT",[36],"Insurance",[38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,39,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],"Akamai WAF","API Security","Apigee API Management","AWS WAF","Google Cloud Armor","OAuth2","OIDC","SAML","REST","GraphQL","SOAP","TLS\u002FSSL","SIEM","AWS","Azure","GCP","Collaboration","Communication","Analytical Thinking","Problem Solving","Attention to Detail","Web Application Security","Web Application Firewall (WAF)","Bot Mitigation","DoS Protection","Cloud-Native Security Architectures","OWASP Top 10","OWASP API Security Top 10","Authentication and Authorization","API Discovery","API Inventory Management","API Security Monitoring","Security Monitoring","Log Analysis","Secure Software Development Lifecycle (SSDLC)","Incident Response","Vulnerability Detection and Prevention","Threat Detection and Prevention","Security Policy Development","Rule Tuning","False-Positive Analysis","Security Policy Optimization","Dashboard Creation","Metrics and Reporting",{"@type":83,"currency":84,"value":85},"MonetaryAmount","INR",{"@type":86,"minValue":87,"maxValue":88,"unitText":89},"QuantitativeValue",1500000,2500000,"YEAR",[30],[31],"permanent",[94],"FULL_TIME",[94],"onsite","estimated",[],[],"insurance",[102],"hartford, india gcc-puppalaguda village, india",[104],"Puppalguda, Hyderabad, Telangana, Indien",[],[26],[],[109],"Indien",[27],"IND Lead Engineer, Security - GCC041\n\nWe’re determined to make a difference and are proud to be an insurance company that goes well beyond coverages and policies. Working here means having every opportunity to achieve your goals – and to help others accomplish theirs, too. Join our team as we help shape the future.\n\n## Job Posting: Web Application and API Protection (WAAP) Engineer\n\n## Overview\n\nWe are seeking a highly skilled Web Application and API Protection (WAAP) Engineer to join our Information Security team. This role is responsible for designing, implementing, and managing enterprise-scale protections for web applications and APIs. The ideal candidate will have deep expertise in web application security, API security, web application firewalls (WAF), bot mitigation, DoS protection, and modern cloud-native security architectures. As a WAAP Engineer, you will work closely with application development, cloud engineering, network security, and cybersecurity teams to protect critical business services from evolving threats while enabling secure digital innovation.\n\n## Key Responsibilities\n\n- Provide operational support and maintenance for The Hartford’s enterprise WAF and API security platforms\n- Design, deploy, and maintain WAAP solutions including Threat Detection and Prevention Vulnerability Detection and Prevention Bot Management and Account Protection DoS mitigation technologies\n- Develop and manage security policies to protect web applications, mobile applications, and APIs from OWASP Top 10 and OWASP API Top 10 threats\n- Monitor, analyze, and respond to application-layer attacks, malicious bot activity, and API abuse\n- Conduct rule tuning, false-positive analysis, and security policy optimization\n- Support cloud-native WAAP deployments across environments such as AWS, Azure, GCP\n- Create dashboards, metrics, and reports demonstrating security posture, attack trends, and risk reduction\n- Stay current on emerging web, API, and application security threats, vulnerabilities, and industry best practices\n- Participate in security incident response activities involving web applications and APIs\n\n## Required Qualifications\n\n- Bachelor's degree in Information Security, Computer Science, Cybersecurity, or related field (or equivalent experience)\n- 3+ years of experience in application security, web security, network security, or a related cybersecurity role\n- Hands-on experience with WAAP technologies such as Akamai WAF & API Security Apigee API Management AWS WAF Google Cloud Armor\n- Strong understanding of OWASP Top 10 OWASP API Security Top 10 Authentication and Authorization (OAuth2, OIDC, SAML) REST, GraphQL, and SOAP APIs TLS\u002FSSL SPA, MPA and Web Application architectures\n- Experience with API discovery, API inventory management, and API security monitoring\n- Experience with SIEM, security monitoring, and log analysis platforms\n\n## Preferred Qualifications\n\n- Experience implementing enterprise WAF and API security programs\n- Knowledge of Secure Software Development Lifecycle (SSDLC) practices\n- Industry certifications such as: CISSP AWS Certified Security Specialty\n\n## About Us | Our Culture | What It’s Like to Work Here\n\nEvery day, a day to do right. Showing up for people isn’t just what we do. It’s who we are – and have been for more than 200 years. We’re devoted to finding innovative ways to serve our customers, communities and employees—continually asking ourselves what more we can do. Is our policy language as simple and inclusive as it can be? Can we better help businesses navigate our ever-changing world? What else can we do to destigmatize mental health in the workplace? Can we make our communities more equitable? That we can rise to the challenge of these questions is due in no small part to our company values that our employees have shaped and defined. And while how we contribute looks different for each of us, it’s these values that drive all of us to do more and to do better every day.\n\n## About Us\n\n## Our Culture\n\n## What It’s Like to Work Here\n\n## Perks & Benefits\n\n## Legal Notice\n\n## Accessibility Statement\n\n## Producer Compensation\n\n## EEO\n\n## Privacy Policy\n\n## California Privacy Policy\n\n## Your California Privacy Choices\n\n## International Privacy Policy\n\n## Canadian Privacy Policy\n\n## Unincorporated Areas of LA County, CA (Applicant Information)\n\n## MA Applicant Notice\n\n## Hartford India Prospective Personnel Privacy Notice\n\n## Electronic Monitoring Policy",{"aws":113,"gcp":113,"oidc":114,"rest":114,"saml":114,"siem":114,"soap":114,"azure":113,"oauth2":114,"aws waf":114,"graphql":114,"tls\u002Fssl":114,"akamai waf":114,"api security":114,"google cloud armor":114,"apigee api management":114},3,4,[38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53],{"collaboration":114,"communication":114,"analytical thinking":114,"problem solving":114,"attention to detail":114},[54,55,56,57,58],{"rule tuning":114,"api security":114,"log analysis":114,"owasp top 10":114,"api discovery":114,"bot mitigation":114,"dos protection":114,"incident response":114,"dashboard creation":114,"security monitoring":114,"metrics and reporting":114,"api security monitoring":114,"false-positive analysis":114,"api inventory management":114,"web application security":114,"owasp api security top 10":114,"security policy development":114,"security policy optimization":114,"web application firewall (waf)":114,"threat detection and prevention":114,"authentication and authorization":114,"cloud-native security architectures":114,"vulnerability detection and prevention":114,"secure software development lifecycle (ssdlc)":113},[59,39,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81],{"detected_language_jobad":121,"required":122},"en",[123],[124],{"language":125,"level":126},"ENGLISH","C1",[128],"Information and Communications Technology Professionals",[128],"https:\u002F\u002Fthehartford.wd5.myworkdayjobs.com\u002Fen-us\u002Fcareers_external\u002Fjob\u002Findia-gcc-puppalaguda-village\u002Find-lead-engineer--security----web-application-and-api-protection-security-engineer_r2627318",1]