Lead Security Engineer, Akamai WAF

EPAM Systems Inc; Hyderabad, Chennai, Bengaluru; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

EPAM Systems Inc. seeks a Lead Security Engineer to strengthen Akamai-based web application protection and incident response capabilities.

You will collaborate with the security team to assess WAF posture, detect suspicious activity, and refine defenses against real-world attacks. Responsibilities include implementing Akamai WAF rules, investigating incidents, reviewing deployments, and analyzing attack trends.

Qualifications

• Minimum 5+ years of professional security engineering and operations experience.
• Direct expertise with Akamai WAF, Kona Site Defender, or similar Akamai security tools.
• Strong understanding of web application security concepts (OWASP Top 10, DDoS, bot management).
• Proven ability to tune WAF rules and reduce false positives.
• Hands-on incident response experience for web application security events.
• Excellent written and spoken English communication.

Responsibilities

• Implement and maintain Akamai WAF rules and policies.
• Investigate, diagnose, and resolve security incidents affecting web apps.
• Review WAF deployments and overall web application security posture.
• Analyze attack trends and vulnerabilities targeting web applications.
• Provide guidance and best practices for web application defense to the security team.

Skills

Akamai WAF / Kona Site Defender

Web application security

Incident response

WAF tuning

English communication

Security operations

Bot management

DDoS mitigation

OWASP Top 10

Tools

Akamai security tools

Job description

We are hiring a Lead Security Engineer to enhance the client’s Akamai-based web application protection and incident response capabilities. In this role, you will collaborate with the wider security team to assess WAF posture, spot suspicious patterns, and refine defenses against real-world attacks.

Responsibilities

• Implement and maintain Akamai WAF rules and policies, ensuring effective protection
• Investigate, diagnose, and help resolve security incidents connected to web application threats
• Review and assess WAF deployments, security policies, and overall web application security status
• Analyze attack trends, unusual behavior, and vulnerabilities that target web applications
• Support the security team with guidance, expertise, and best practices for web application defense

Requirements

• Broad IT experience with 5+ years of professional experience spanning security engineering and operations
• Direct expertise with Akamai offerings (WAF, Kona Site Defender, or comparable Akamai security tools)
• Deep understanding of web application security concepts such as OWASP Top 10, DDoS mitigation, and bot management
• Demonstrated ability to tune WAF rules effectively while addressing false positives
• Hands-on incident response experience for security events affecting web applications
• Self-directed working style with the flexibility to integrate fast into a new team
• Strong English communication skills (spoken and written)

Nice to have

• Familiarity with WAF/CDN alternatives including Cloudflare, F5, and Imperva
• Knowledge of API security approaches and controls
• Relevant security certifications such as CISSP, CEH, and GWAPT