Cyber Security Engineer

Responsibilities

• Monitor and manage WAF and edge security ticket queues, resolving incidents and service requests with timely, clear communication
• Investigate and respond to Layer 7 security events, including bot activity, credential abuse, API attacks, injection attempts, and L7 DDoS, escalating when appropriate
• Provide on‑call support for Sev 1 and Sev 2 incidents, partnering with SOC/IR, SRE, and application teams to support containment and recovery efforts
• Administer, configure, and continuously optimize Akamai and Cloudflare WAF/WAAP platforms, including custom and managed rules, rate limiting, geo/IP/ASN controls, mTLS, and header policies
• Manage bot mitigation strategies using scoring models, allow lists, challenges, and behavioral protections
• Deploy and maintain protections aligned to OWASP Top 10, API security, and business logic abuse, balancing security effectiveness with application performance and caching
• Implement platform changes using standard change‑management practices, including peer review, testing, phased rollouts, and rollback planning
• Oversee certificate lifecycle management and DNS/edge updates, leveraging policy‑as‑code approaches where feasible
• Integrate WAF and edge telemetry into SIEM platforms and maintain dashboards, alerts, runbooks, and SOPs to reduce false positives and incident recurrence
• Deliver platform health reporting with data‑driven recommendations to improve resiliency and reduce operational risk
• Collaborate closely with SOC/IR and development teams to align security controls with application behavior and operational needs
• Contribute to internal documentation and continuous improvement initiatives to strengthen platform reliability and control effectiveness
• Stay current on emerging threats and vendor enhancements, proactively recommending configuration updates and control improvements

• Bachelor’s degree in Computer Engineering or related field, or equivalent practical experience
• 3–6+ years of experience in enterprise network security operations
• Must have hands‑on Akamai experience
• Proven expertise in WAF, web, and API protection policy tuning and incident response, including blocking vs. challenge strategies and false‑positive reduction
• Strong understanding of HTTP/S, TLS/PKI, DNS, CDN caching/edge routing, and performance tradeoffs
• Experience integrating WAF logs into SIEM platforms and building actionable dashboards and alerts
• Working knowledge of scripting and automation (e.g., Terraform, Bash, Python, Ansible, or Power Shell); comfortable with APIs, JSON/YAML, and regex
• Strong analytical troubleshooting, communication, and cross‑functional collaboration skills
• Willingness to participate in a rotational on‑call schedule

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors such as relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical, dental, vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note:

Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce’s sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI‑generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.