Lead Cybersecurity Engineer - Bot Detection

Careernet; Chennai District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Careernet is seeking an experienced security specialist to lead bot detection and mitigation using Akamai WAF configurations. You will analyze ecommerce fraud patterns and correlate telemetry across WAF/CDN and app logs to enhance detection and drive secure deployments.

The role requires deep knowledge of HTTP, client behavior, and rate-limiting strategies, with emphasis on staged rollouts and A/B testing for secure conversion.

Qualifications

• Bachelor's degree in a related field.
• Experience with Akamai security solutions and WAF configurations.
• Proven ability to analyze WAF/CDN and application logs for threat detection.

Responsibilities

• Act as a high-level specialist who independently drives bot detection and mitigation initiatives and escalates to management as the next step.
• Analyze ecommerce fraud attack patterns and support mitigation strategies for credential stuffing/ATO, carding, scraping, scalping/inventory denial, and promo/gift card abuse.
• Master telemetry and logging correlation across WAF/CDN logs and application logs to support investigations, detection improvements, and operational dashboards.
• Build and refine detection logic using feature engineering and traffic baselining (normal vs anomaly) to improve coverage while reducing false positives.
• Develop and maintain golden signals such as login failure rate, unique IPs per account, new device rate, checkout abandonment spikes, and 4xx/5xx patterns.
• Apply deep understanding of HTTP and client behavior to interpret headers, cookies, caching, redirects, and TLS-related signals for bot identification and mitigation.
• Engineer and tune edge/WAF/CDN rules and bot policies, including rate limiting strategies and challenge flows.
• Own allowlist/denylist governance, including how allowlists can be abused, and ensure safe operational controls.
• Drive release discipline for mitigations using staged deployment and validate impact through monitoring and alerting.
• Support staged mitigation experiments (A/B testing) to protect conversion while improving security outcomes.
• Collaborate closely with application teams, fraud, SRE, and security operations to continuously tune detection logic as attacker techniques evolve.

Skills

Akamai

Web Application Firewall (WAF)

DevSecOps

Education

Bachelor's degree in related field

Job description

Key Skills:

Akamai, Web Application Firewall (WAF), DevSecOps

Roles and Responsibilities:

• Act as a high-level specialist who independently drives bot detection and mitigation initiatives and escalates to management as the next step.
• Analyze ecommerce fraud attack patterns and support mitigation strategies for credential stuffing/ATO, carding, scraping, scalping/inventory denial, and promo/gift card abuse.
• Master telemetry and logging correlation across WAF/CDN logs and application logs to support investigations, detection improvements, and operational dashboards.
• Build and refine detection logic using feature engineering and traffic baselining (normal vs anomaly) to improve coverage while reducing false positives.
• Develop and maintain golden signals such as login failure rate, unique IPs per account, new device rate, checkout abandonment spikes, and 4xx/5xx patterns.
• Apply deep understanding of HTTP and client behavior to interpret headers, cookies, caching, redirects, and TLS-related signals for bot identification and mitigation.
• Engineer and tune edge/WAF/CDN rules and bot policies, including rate limiting strategies (global, per IP, per session, per account, per ASN) and challenge flows (JS challenge, CAPTCHA, proof-of-work style concepts).
• Own allowlist/denylist governance, including how allowlists can be abused, and ensure safe operational controls.
• Drive release discipline for mitigations using staged deployment (monitor alert soft block hard block) and validate impact through monitoring and alerting.
• Support staged mitigation experiments (A/B testing) to protect conversion while improving security outcomes.
• Collaborate closely with application teams, fraud, SRE, and security operations to continuously tune detection logic as attacker techniques evolve.

Skills Required:

• Strong expertise in Akamai security solutions and WAF configurations
• Deep understanding of bot detection, fraud patterns, and application security
• Experience analyzing WAF/CDN and application logs for threat detection
• Knowledge of HTTP protocol, client behavior, cookies, headers, and TLS signals
• Hands-on experience designing and tuning rate limiting and bot mitigation rules
• Familiarity with DevSecOps practices (CI/CD security integration)
• Experience in anomaly detection, traffic baselining, and feature engineering
• Strong understanding of ecommerce fraud scenarios (ATO, scraping, carding, etc.)
• Experience in staged rollout strategies (monitoring - blocking) and A/B testing for security controls
• Ability to collaborate with cross-functional teams (SRE, fraud, app, security ops)

Education:

Bachelor's Degree in related field