Security Analysis - Security Analysis

Job Title: Akamai WAF Engineer / Akamai Web Security Engineer 

Overview

We are seekingtwo experienced, hands-on Akamai WAF Engineers to join the Web Security (WebSec) team on a contract basis during a critical transition period. These roles are focused onday-to-day Akamai Web Application Firewall (WAF) operations, incident response, and edge security management across high-traffic eCommerce and API platforms.

Recent production incidents involving certificate lifecycle management and Akamai edge behaviour have highlighted the need for stronger operational ownership, improved visibility, and consistent configuration management. As a key extension of the WebSec team, you will be responsible for maintaining the stability, security, and performance of Akamai-managed applications and APIs.

Note: This is a dedicatedAkamai-focused operational role, not a general Cyber Security or Application Security position.

Key Responsibilities

• Administer and supportAkamai WAF solutions, includingApp & API Protector (AAP) andKona Site Defender (KSD) in production environments.
• Monitor, investigate, and respond tosecurity incidents, including WAF events, DDoS attacks, bot traffic, API abuse, and production outages.
• PerformWAF policy tuning, rule optimisation, false-positive analysis, and exception management.
• Configure and maintainAkamai Property Manager, security policies, edge behaviours, and related configurations.
• Troubleshootedge-to-origin connectivity, application delivery, and API communication issues.
• SupportTLS/SSL certificate lifecycle management, certificate renewals, and edge delivery troubleshooting.
• Execute standard and emergency production changes following established change management processes.
• Develop and maintain operational documentation, includingrunbooks, playbooks, and standard operating procedures (SOPs).
• Collaborate with internal engineering teams, Akamai support, vendors, and business stakeholders to resolve production issues.
• Participate in production support and operational readiness activities to ensure platform availability and security.

Required Qualifications

Mandatory (Screen-Out Criteria)

Candidatesmust have direct, hands-on experience with Akamai WAF. Profiles without production Akamai WAF experience will not be considered.

Technical Skills

• Hands-on experience administeringAkamai App & API Protector (AAP) and/orKona Site Defender (KSD).
• Proven experience supportingproduction Akamai environments.
• Strong understanding of:
  • HTTP/HTTPS protocols
  • REST APIs and web application architecture
  • Web Application Firewall concepts and rule logic
  • WAF policy tuning and false-positive mitigation
• Experience responding to production incidents and security events.
• Ability to troubleshoot:
  • Edge-to-origin communication
  • API connectivity issues
  • Application delivery problems
• Experience managing:
  • Akamai Property Manager
  • Edge configurations
  • Security policies
• Strong analytical and troubleshooting skills.

Preferred Qualifications

• Experience withAkamai Bot Manager.
• Knowledge ofRate Controls andDoS/DDoS protection.
• Experience with:
  • Akamai Property Manager
  • Edge configuration management
  • Edge security optimisation
• Experience managing:
  • TLS/SSL certificates
  • Certificate Provisioning System (CPS)
  • Secure by Default (SBD)
  • TLS debugging
• Experience supporting high-volumeeCommerce orAPI-driven environments.
• Experience creating operational documentation, runbooks, and incident response playbooks.
• Familiarity with production change management processes.