Security Engineer, Web Application Security

Building global, iconic brands people trust and champion

YUM!

Remote

We are seeking a Security Engineer to join Yum! Brands' Cybersecurity Engineering organization and help protect the web applications and APIs supporting our global digital ecosystem across KFC, Taco Bell, Pizza Hut, Habit Burger & Grill, and Yum! corporate platforms.

This role will support the operation and continuous improvement of Web Application Firewall (WAF), Content Delivery Network (CDN), API security, and digital certificate management services. The engineer will work with technologies such as Akamai App & API Protector, Akamai CDN, Certificate Manager, and other web security platforms to help protect internet-facing applications from cyber threats while maintaining application availability and performance.

The ideal candidate has a strong technical foundation in networking, web technologies, or cybersecurity and is interested in developing deeper expertise in web application security, CDN technologies, APIs, and certificate management.

This role will work closely with senior engineers and cross-functional teams to troubleshoot issues, onboard applications, respond to security events, implement security changes, maintain certificates, and improve operational processes.

• Configure, maintain, and support Web Application Firewall (WAF) protections using Akamai App & API Protector and related security technologies.
• Monitor and investigate web security events involving:
• Other suspicious or malicious web traffic
• Layer 7 attacks
• DDoS attacks
• Credential stuffing
• Bot traffic
• API attacks
• OWASP Top 10 vulnerabilities
• Assist with WAF policy tuning to reduce false positives while maintaining appropriate security protections.
• Review application traffic and security logs to identify attack patterns, application behavior, and potential security concerns.
• Implement approved WAF policy changes, exceptions, allow lists, and security configuration updates.
• Support senior engineers during complex security investigations and production incidents.

• Configure and maintain CDN and edge security configurations supporting internet-facing applications.
• Work with Akamai technologies including:
• Caching and delivery configurations
• Origin connectivity
• DNS integrations
• Cloudlets
• Edge Hostnames
• Property Manager
• Troubleshoot common CDN and web application issues involving:
• Application availability
• TLS/SSL
• Origin connectivity
• Routing
• DNS
• Cache behavior
• HTTP response codes
• Support the onboarding of new websites and APIs onto the enterprise WAF/CDN platform.

Perform pre-production validation, testing, and post-change verification.

• Support the lifecycle management of public TLS certificates, including:
• Replacement
• Revocation
• Renewal
• Deployment
• Issuance
• Request validation
• Monitor certificate inventories and upcoming expiration dates.
• Coordinate certificate changes and renewals with application owners and other technical teams.
• Validate certificates after deployment and troubleshoot common certificate, trust chain, DNS validation, and TLS issues.
• Maintain accurate certificate ownership and lifecycle documentation.
• Escalate certificate risks or renewal issues before they can impact production applications.

• Monitor and investigate WAF alerts, application issues, and security events.
• Analyze HTTP requests, response codes, headers, WAF logs, CDN logs, and other available telemetry to assist with troubleshooting and investigations.
• Participate in incident response activities involving WAF, CDN, DDoS, certificates, and internet-facing applications.
• Assist with troubleshooting customer-impacting production issues and determining whether issues originate…