Web Application Firewall

**Why Kyndryl**

Kyndryl is a market leader that thinks and acts like a start-up. We design, build, manage, and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl?

We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers, and our communities. We invest heavily in you - not only through learning, training, and career development, but also through the flexible working practices and stellar benefits that help you grow and progress long-term. And we give back - from planting 90,000 trees in our first 3 months as part of our One Tree Planted initiative to the Corporate Social Responsibility and Environment, Social and Governance practices embedded within everything we do, we are committed to powering human progress in an ethical, sustainable way.

**Your Role and Responsibilities**
- Support business risk Assessment and mitigation (“BRAM/pBRAM”) efforts for client
- Ensure WAF alerts are fed to the SIEM
- Review and manage WAF Security Events identified through the SIEM
- Support and maintain WAF appliances within MedStar and manufacturer specifications
- Deploy certificates to WAFs per MedStar Change Management process
- Ensure new web Application URLs are protected with standard MedStar WAF policies
- Upon discovery of anomalies or inconsistencies in WAF policies, escalate to client se
- curity engineering team
- Assist in remediation and deployment of new rules/policies as requested
- Correlate with certificate requests and verify data to ensure all cliet hosted web prop
- erties are protected by the WAF
- Correlate with vulnerability scan data to ensure all hosted web properties are protected by the WAF
- Ensure that keys for all configured web properties in the WAF stay current. Refresh expired keys with new ones in the WAF unless the web site is no longer in production
- Monitor G2 Referrers List and take action per MedStar policies, including blocking IP ad
- dresses per the G2 Blocked IP Address Management process defined by client
- Assist with incident response through WAF logs and alerts
- Add temporary or permanent blocking rules (such as IP addresses) in the WAF

**Required Technical and Professional Expertise**
- Factor authentication (external 1st factor /RADIUS server/one-time password /knowledge-based /grid card /X.509 v3 certificate/smart credential/hardware/soft token/ short message service (“SMS”)/ passcode list/ temporary personal identification number (PIN)/ mutual/ IP geolocation/ machine-/device-based/ mobile device/ biometric/ risk-based
- Web Application architectures
- Remote access: SSL VPN/ end user workstation/ client-server VPN/
- Multiple factors simultaneously and sequentially
- Reports & Analytics
- Audit capabilities
- Cloud Apps knowledge
- Custom-developed integration configurations;
- Knowledge of Onboarding and Offboarding processes
- Active directory users
- Monitoring and alarming infrastructure for notification of critical system errors or conditions

**Preferred Technical and Professional Experience**
- Computer Science, Security, Technical, Information Technology
- Certification related Network and Security

**Required Education**

Bachelor's Degree

**Preferred Education**

Bachelor's Degree

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks (KINs) are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

**Other things to know**

**Primary Job Category**

Technical Specialist

**Role (Job Role)**

Systems Administrator

**Employment Type**

Full-Time

**Contract Type**

Regular

**Position Type**

Professional

**Travel Required**

No Travel

**Company**

(Y014) Kyndryl Costa Rica, Sociedad de Responsabilidad Limitada

**Is this role a commissionable / sales incentive based position**

No