Job Summary:
We are looking for a Senior Security Engineer with strong hands-on experience in Akamai and AWS WAF to manage, tune, and troubleshoot web application and API security controls across production and non-production environments.
Key Responsibilities:
Manage Akamai App & API Protector/Kona Site Defender, Property Manager, Bot
Manager, Client Reputation, Rate Controls, and IP/Network Lists.
Configure and tune AWS WAF Web ACLs, managed/custom rules, rate-based rules, IP sets, and Firewall Manager policies.
Perform WAF False Positive/False Negative analysis, rule tuning, exclusions, and security optimization.
Monitor and investigate DoS/DDoS, bot attacks, API abuse, scanners, scrapers, and application-layer attacks.
Analyze Akamai and AWS WAF logs using SIEM platforms such as Elastic, Splunk, or Sentinel.
Troubleshoot WAF issues involving CloudFront, API Gateway, ALB, Route 53, and application traffic.
Implement targeted security controls based on IP, ASN, Geo, URI/path, headers, User- Agent, and request patterns.
Support security incidents, emergency mitigations, RCA, and post-incident improvements.
Automate WAF operational tasks using Python, REST APIs, Terraform, or AWS CLI.
Collaborate with SOC, Application, Cloud, Network, and DevOps teams.
Required Skills & Qualifications:
6–8 years of cybersecurity/WAF experience.
Strong hands-on experience with Akamai WAF and AWS WAF.
Good understanding of OWASP Top 10, HTTP/HTTPS, API security, and DDoS protection.
Experience with WAF tuning, FP/FN analysis, bot management, and rate controls.
Experience with CloudFront, API Gateway, ALB, and AWS Firewall Manager.
Strong troubleshooting, analytical, and incident-response skills.
Knowledge of Python, REST APIs, Terraform, and SIEM is preferred.
Preferred Certifications:
AWS Security Specialty / Solutions Architect
Akamai Security Certification
CISSP / CEH / CCSP
Akamai