Security Engineer – Edge & Cloud Security; Akamai​/AWS

Location:

Remote (US-based)

Employment Type:

Full-time / Contract

We are seeking an experienced Senior Security Engineer specializing in Akamai Edge Security to lead the defense of our application layer during a major enterprise cloud migration to AWS.

In this role, you will own the configuration, fine-tuning, and operational health of Akamai App & API Protector (WAF) and Bot Manager Premier (BMP). You will act as the frontline subject matter expert during high-severity security incidents and work directly with cloud architects, engineering teams, and Dev Ops to ensure zero disruption to legitimate traffic while maintaining a resilient security posture across hybrid and cloud environments.

• 5+ Years of Hands-On Akamai Edge Security:
  Deep expertise deploying, managing, and tuning Akamai Web Application Firewall (Kona / App & API Protector) and Bot Manager Premier (BMP) across high-traffic, multi-tenant enterprise architectures.
• Incident Response & Bot Tuning:
  Proven track record tuning behavioral bot detections, mitigating Layer 7 DDoS and credential stuffing attacks, and eliminating false positives without degrading user experience.
• App Sec Fundamentals:
  Deep understanding of OWASP Top 10 vulnerabilities, API security risks, HTTP/S protocol behaviors, and threat mitigation at the edge.
• Cloud & Hybrid Networking:
  Working knowledge of AWS networking and application architectures (e.g., ALBs, Cloud Front, Route 53, VPCs) and how edge proxies integrate into hybrid cloud routing.

• Edge Security Architecture:
  Design, optimize, and maintain Akamai WAF rulesets, rate-limiting policies, and custom bot detection conditions aligned with application risk profiles.
• Cloud Migration Enablement:
  Partner with AWS migration teams to design routing cutovers, ensure policy parity between on-prem and cloud workloads, and safeguard endpoints throughout transitional states.
• Threat Mitigation & Incident Response:
  Serve as the Tier-3 escalation point for active Layer 7 attacks, automated scraping, credential stuffing, and zero-day exploit attempts; conduct rapid triage and post-incident root cause analyses (RCA).
• Policy Lifecycle Management:
  Establish baseline evaluation methodologies for new rule updates, staging deployments, and proactive false-positive suppression.
• Observability & Analytics:
  Integrate Akamai log streams (Data Stream, SIEM integration) with central logging solutions (e.g., Splunk, Datadog) to build actionable threat dashboards and executive reporting.
• Documentation & Enablement:
  Maintain precise architectural diagrams, runbooks, and policy documentation to empower operational handoffs and engineering teams.

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience.
• 5+ years directly configuring and troubleshooting Akamai WAF and Bot Manager Premier.
• Strong proficiency in network analysis tools (Wireshark, cURL, Fiddler, Postman) and browser inspection for payload debugging.
• Experience with enterprise log analysis and SIEM tooling (e.g., Splunk, Elastic, Sentinel).
• Excellent verbal and written technical communication skills, with comfort advising both software engineers and senior leadership during active incidents.

• Experience managing edge security via Infrastructure as Code (Terraform, Akamai CLI / APIs).
• Prior security engineering experience within financial services, e-commerce, or regulated enterprise environments.
• Active security or cloud certifications, such as Akamai Certified Specialist, AWS Certified Security – Specialty, CCSP, or GIAC (GWAPT, GCIH).