The company offers various perks such as travel discounts, which include reduced rates for flights and access to e-coupon schemes. 

Comprehensive Benefits Package

The company invests in its employees through training programs, workshops, and skill development initiatives. 

Career Development Opportunities

The company is known for its innovative culture and encourages employees to bring creative ideas to the table. 

Dynamic Work Environment

AirAsia X

Now, that dream has sparked half a billion more dreams and will continue to do so through new experiences from Asean fast food and food deliveries to a network of gateways and getaways.
Source: <a href="https://www.capitala.com/mission_vision.html" target="_self">https://www.capitala.com/mission_vision.html</a>

Who We Are

Our Mission
Connecting People, Transforming Lives
People are at the heart of everything we do.
We exist to connect everyone with everything everywhere. In doing so, we serve the underserved, build communities and transform lives to unite Asean.

Our Vision
Uniting Asean and Beyond
A region rich in culture, diversity &amp; talent, we champion the idea of a region united by our shared heritage and aspirations.

Source: <a href="https://www.capitala.com/mission_vision.html" target="_self">https://www.capitala.com/mission_vision.html</a>

Our Values

Job DescriptionThe WAF and Bot Management Specialist will be a key member of our cybersecurity operations team, responsible for the design, implementation, management, and optimization of our Web Application Firewall (WAF) solutions. This role requires deep technical expertise in WAF technologies, strong analytical skills for threat detection and response, and a proactive approach to enhancing our security posture. The successful candidate will play a critical role in safeguarding our web applications against a wide range of cyberattacks.Key Responsibilities:<ul><li>WAF Management &amp; Optimization:<ul><li>Design, deploy, configure, and maintain WAF policies and rulesets to protect web applications from common vulnerabilities and emerging threats.</li><li>Perform regular reviews and fine-tuning of WAF configurations to minimize false positives while ensuring comprehensive protection.</li><li>Collaborate with application development to integrate WAF security controls into the application lifecycle.</li></ul></li><li>Threat Detection &amp; Incident Response:<ul><li>Lead the strategy, implementation, and fine-tuning of anti-bot solutions to combat sophisticated automated threats, including scraping, ATO, DDoS etc.</li><li>Monitor WAF logs and alerts for suspicious activities, security incidents, and potential breaches.</li><li>Conduct in-depth analysis of WAF logs, network traffic, and application behavior to identify attack patterns, compromise indicators, and sophisticated threats.</li><li>Lead incident response activities related to web application attacks, including investigation, containment, eradication, recovery, and post-mortem analysis.</li><li>Develop and implement custom detection rules and signatures based on threat intelligence and observed attack techniques.</li></ul></li><li>Log Analysis &amp; Pattern Detection:<ul><li>Utilize SIEM platforms and other security tools to perform advanced log analysis, correlation, and anomaly detection.</li><li>Develop and refine analytical techniques to identify subtle attack patterns and indicators of compromise that may evade standard defenses.</li><li>Generate actionable intelligence from security logs to improve WAF efficacy and overall security posture.</li></ul></li><li>Vulnerability Management &amp; Remediation:<ul><li>Work closely with security testing teams (e.g., penetration testers, vulnerability scanners) to understand identified vulnerabilities and implement appropriate WAF countermeasures.</li></ul></li><li>Reporting &amp; Documentation:<ul><li>Prepare and present regular reports on WAF performance, security incidents, and threat landscape trends.</li><li>Maintain comprehensive documentation of WAF configurations, policies, procedures, and incident response playbooks.</li></ul></li><li>Mentorship &amp; Collaboration:<ul><li>Provide technical guidance and mentorship to junior analysts within the team.</li><li>Collaborate effectively with cross-functional teams, including IT operations, development, and compliance.</li></ul></li></ul>Qualifications:<ul><li>Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.</li><li>Minimum of 2+ years of experience in a dedicated WAF management or web application security role.</li><li>Proven expertise in designing, implementing, and managing WAF solutions.</li><li>Strong understanding of web application vulnerabilities (OWASP Top 10, CWE), attack vectors, and mitigation strategies.</li><li>Excellent analytical, problem-solving, and critical thinking skills.</li><li>Strong communication skills, both written and verbal, with the ability to articulate complex technical concepts to diverse audiences.</li><li>Ability to work independently and as part of a collaborative team in a fast-paced environment.</li></ul>Nice to Have:<ul><li>Hands-on experience with Cloudflare WAF, DDoS protection, and related security services.</li><li>Relevant industry certifications (e.g., CISSP, GWAPT, GWEB, CEH).</li><li>Experience with cloud security platforms (AWS, Azure, GCP) and containerized environments.</li><li>Experience in e-commerce environments</li><li>Demonstrable experience with log analysis, SIEM platforms (e.g., Splunk, Elastic Stack, Microsoft Sentinel), and advanced pattern detection techniques.</li><li>Proficiency in scripting languages (e.g.,SQL, Python, PowerShell) for automation and data analysis is a plus.</li></ul> We are all different - one talent to another - that is how we rely on our differences. At AirAsia, you will be treated fairly and given all chances to be your best.We are committed to creating a diverse work environment and are proud to be an equal opportunity employer. Search Firm Representatives - AirAsia does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place.

This job is all about keeping our web apps safe as a WAF and Bot Management Specialist. You might like this job because you&#x27;ll tackle cyber threats, help teams collaborate, and use cool tech to enhance security!


 
Job DescriptionThe WAF and Bot Management Specialist will be a key member of our cybersecurity operations team, responsible for the design, implementation, management, and optimization of our Web Application Firewall (WAF) solutions. This role requires deep technical expertise in WAF technologies, strong analytical skills for threat detection and response, and a proactive approach to enhancing our security posture. The successful candidate will play a critical role in safeguarding our we...

WAF and Bot Management Specialist

AirAsia X

Digital Forensic & Incident Response Analyst

Hiredly X

Solution Engineer (Network, Security & Cloud Solutions)

Dynamic Link Solutions Sdn Bhd

Cloud Engineer

Joget Technology Sdn. Bhd. (Joget, Inc.)

Cyber Security Engineer (Penetration Testing)

Hiredly X

Senior Security Engineer

Hiredly X

DevOps and System Administrator

Hiredly X

Project Coordinator

AiChat Sdn Bhd

Software Engineer (Angular & Spring Boot)

Hiredly X

Senior System Engineer

Hiredly X

Company Profile

AirAsia X