Senior/Lead Security Engineer - AKAMAI

EPAM Systems; Gurugram District; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

EPAM Systems seeks a seasoned Senior/Lead Security Engineer to collaborate with and assist the client's security team on web application protection and security operations. You will partner with the wider security team to manage WAF rules through Akamai, handle incidents, and improve overall security posture.

Key responsibilities include tuning WAF configurations, identifying attack patterns, and sharing best practices with the team. Strong English communication is essential for this role.

Qualifications

• Total IT experience of 6–15 years in the industry.
• Direct experience with Akamai WAF, Kona Site Defender, or similar Akamai tools.
• Strong knowledge of web application security principles (OWASP Top 10, DDoS mitigation, bot management).
• Experience tuning WAF rules and managing false positives.
• Hands-on incident response experience.
• Ability to work autonomously and adapt to a team.
• Excellent English communication skills.

Responsibilities

• Set up, adjust, and manage WAF rules and policies through Akamai
• Investigate and resolve security incidents related to web applications
• Assess WAF configurations and overall web app security posture
• Detect attack patterns and vulnerabilities in web apps
• Provide ongoing security guidance to the team

Skills

Web application security

Akamai WAF

Incident response

OWASP Top 10

English communication

Tools

Akamai Kona Site Defender

Cloudflare

F5

Imperva

Job description

We are seeking a seasoned Senior/Lead Security Engineer to collaborate with and assist the client's security team. This specialist will partner closely with the wider security team, focusing on essential aspects of web application protection and security operations.
Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai
• Engage in handling, investigating, and resolving security incidents connected to web application threats
• Perform assessments of WAF configurations, security policies, and overall web application security posture
• Detect and evaluate attack patterns, irregularities, and vulnerabilities affecting web applications
• Offer ongoing support to the security team by contributing expertise and best practices in web application security

Requirements

• 6-15 years of total experience in the IT field
• Direct experience working with Akamai (WAF, Kona Site Defender, or comparable Akamai security tools)
• Solid grasp of web application security principles (OWASP Top 10, DDoS mitigation, bot management)
• Background in tuning WAF rules and managing false positives
• Hands-on experience responding to security incidents
• Capacity to work autonomously while quickly adapting to an existing team dynamic
• Strong English communication abilities

Nice to have

• Exposure to additional WAF/CDN platforms (Cloudflare, F5, Imperva)
• Knowledge of API security practices
• Relevant security certifications (CISSP, CEH, GWAPT)