Lead Security Engineer - Akamai

EPAM Systems Inc; Hyderabad, Chennai, Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

EPAM Systems Inc is seeking a Lead Security Engineer to strengthen web application defense and security operations using Akamai within the client’s security organization. The role focuses on tuning WAF controls, investigating threats, and improving protections across applications.

Responsibilities include configuring Akamai WAF rules, triaging security incidents, and evaluating configurations to reduce risk. Strong English communication and 5+ years of security experience are required.

Qualifications

• 5+ years of professional experience in security and operations.
• Hands-on with Akamai products (WAF, Kona Site Defender, or similar).
• Solid understanding of web application security fundamentals (OWASP Top 10, DDoS, bot management).
• Proven track record tuning WAF rules and reducing false positives.
• Experience responding to security incidents in production environments.
• Ability to work independently and ramp up quickly in a new team.
• Strong English communication skills.

Responsibilities

• Configure, tune, and administer WAF rules and policies using Akamai.
• Triage, investigate, and remediate web application security incidents.
• Evaluate WAF configurations, policies, and overall security posture.
• Identify attack patterns, anomalies, and vulnerabilities in web apps.
• Share expertise and best practices for web app protection with the security team.

Skills

Security experience

Akamai WAF

Web app security

DDoS & bot management

WAF tuning

Incident response

English communication

Tools

Akamai Kona Site Defender

Job description

We are looking for a Lead Security Engineer to strengthen web application defense and security operations with Akamai in the client’s security organization. You will partner closely with the broader security group to tune WAF controls, investigate web threats, and improve protections across applications.

Responsibilities

• Configure, tune, and administer WAF rules and policies using Akamai
• Participate in triage, investigation, and remediation of security incidents related to web application threats
• Evaluate WAF configurations, security policies, and the overall web application security posture
• Identify and analyze attack patterns, anomalies, and vulnerabilities impacting web applications
• Provide ongoing support to the security team by sharing expertise and recommended practices for web application protection

Requirements

• Extensive IT background with 5+ years of professional experience across security and operations
• Hands-on experience with Akamai products (WAF, Kona Site Defender, or comparable Akamai security tools)
• Solid understanding of web application security fundamentals, including OWASP Top 10, DDoS mitigation, and bot management
• Proven track record adjusting WAF rules and reducing false positives through careful tuning
• Practical experience responding to security incidents in production environments
• Ability to work independently while ramping up quickly within a new team setup
• Strong English communication skills (spoken and written)

Nice to have

• Experience with other WAF/CDN platforms such as Cloudflare, F5, or Imperva
• Understanding of API security best practices
• Security certifications such as CISSP, CEH, or GWAPT