Lead Cybersecurity Engineer - Bot Detection_97716

MyCareernet; Chennai District; On-site; INR 1,800,000 - 2,900,000; Full time

Job summary

MyCareernet in Chennai, India, seeks a senior security specialist to lead bot detection and mitigation initiatives around Akamai WAF and CDN. You will analyze ecommerce fraud patterns, tune rules, and work with SRE, fraud, and app teams to strengthen protections.

You will own telemetry, perform feature engineering, and guide staged rollouts of mitigations while reducing false positives and preserving user conversions.

Qualifications

• Expert in Akamai security solutions and WAF configurations
• Experience detecting ecommerce fraud patterns and bot threats
• Proficient in analyzing WAF/CDN and application logs for security
• Hands-on with rate limiting and bot mitigation rule tuning
• Familiar with DevSecOps practices and CI/CD security
• Skilled in anomaly detection, traffic baselining, feature engineering
• Collaborates with SRE, fraud, app, and security ops teams

Responsibilities

• Act as a senior specialist driving bot detection initiatives
• Analyze ecommerce fraud attack patterns and support mitigation
• Correlate telemetry across WAF/CDN and app logs for investigations
• Refine detection logic using feature engineering and baselining
• Develop golden signals like login failures and unique IPs per account
• Tune edge/WAF/CDN rules and rate-limiting strategies
• Govern allowlists/denylists and safe operational controls
• Drive staged mitigation releases and measure impact via monitoring
• Support A/B testing for security controls
• Collaborate with cross-functional teams to evolve detection logic

Skills

Akamai security solutions

WAF configurations

bot detection

fraud patterns

log analysis

rate limiting

DevSecOps

anomaly detection

feature engineering

collaboration

Education

Bachelor's Degree in related field

Tools

Akamai

Job description

Key Skills:

Akamai, Web Application Firewall (WAF), DevSecOps

Roles and Responsibilities:

• Act as a high-level specialist who independently drives bot detection and mitigation initiatives and escalates to management as the next step.
• Analyze ecommerce fraud attack patterns and support mitigation strategies for credential stuffing/ATO, carding, scraping, scalping/inventory denial, and promo/gift card abuse.
• Master telemetry and logging correlation across WAF/CDN logs and application logs to support investigations, detection improvements, and operational dashboards.
• Build and refine detection logic using feature engineering and traffic baselining (normal vs anomaly) to improve coverage while reducing false positives.
• Develop and maintain golden signals such as login failure rate, unique IPs per account, new device rate, checkout abandonment spikes, and 4xx/5xx patterns.
• Engineer and tune edge/WAF/CDN rules and bot policies, including rate limiting strategies (global, per IP, per session, per account, per ASN) and challenge flows (JS challenge, CAPTCHA, proof-of-work style concepts).
• Own allowlist/denylist governance, including how allowlists can be abused, and ensure safe operational controls.
• Drive release discipline for mitigations using staged deployment (monitor alert soft block hard block) and validate impact through monitoring and alerting.
• Support staged mitigation experiments (A/B testing) to protect conversion while improving security outcomes.
• Collaborate closely with application teams, fraud, SRE, and security operations to continuously tune detection logic as attacker techniques evolve.

Skills Required:

• Strong expertise in Akamai security solutions and WAF configurations
• Deep understanding of bot detection, fraud patterns, and application security
• Experience analyzing WAF/CDN and application logs for threat detection
• Hands-on experience designing and tuning rate limiting and bot mitigation rules
• Familiarity with DevSecOps practices (CI/CD security integration)
• Experience in anomaly detection, traffic baselining, and feature engineering
• Strong understanding of ecommerce fraud scenarios (ATO, scraping, carding, etc.)
• Experience in staged rollout strategies (monitoring - blocking) and A/B testing for security controls
• Ability to collaborate with cross-functional teams (SRE, fraud, app, security ops)

Education:

Bachelor's Degree in related field