Senior/Lead Security Engineer - AKAMAI

Epam Systems; Hyderabad, Chennai District, Bengaluru; On-site; INR 1,500,000 - 4,000,000; Full time

Job summary

Epam Systems seeks a seasoned Senior/Lead Security Engineer to join the client's security team in Hyderabad. You will work with the broader security group to enhance web application protection and security operations.

You will set up and tune Akamai WAF rules, investigate incidents, assess configurations, and promote best practices for modern web security. Strong English communication is essential for collaboration across teams.

Qualifications

• 6-15 years of experience in IT/security.
• Hands-on Akamai WAF experience (WAF, Kona Site Defender).
• Strong knowledge of OWASP Top 10, DDoS mitigation, bot management.
• Experience fine-tuning WAF rules and reducing false positives.
• Experience responding to security incidents in web apps.
• Ability to work independently and adapt to new teams.
• Strong English communication abilities.

Responsibilities

• Set up, adjust, and manage WAF rules and policies through Akamai.
• Investigate and resolve security incidents related to web applications.
• Assess WAF configurations, security policies, and posture of web apps.
• Detect and analyze attack patterns, anomalies, and vulnerabilities.
• Provide ongoing guidance and best practices in web app security.

Skills

Incident response

Web security

Indepedent work

Team collaboration

Tools

Akamai WAF

Kona Site Defender

Cloudflare

F5 BIG-IP

Imperva

Job description

We're seeking a seasoned Senior/Lead Security Engineer to become part of and provide support to the client's security team. The specialist will collaborate closely with the wider security team, addressing critical areas including web application protection and security operations.

Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai
• Take part in handling, investigating, and resolving security incidents connected to web application threats
• Perform assessments of WAF configurations, security policies, and the overall security posture of web applications
• Detect and examine attack patterns, anomalies, and vulnerabilities affecting web applications
• Offer ongoing support to the security team by contributing expertise and best practices in web application security

Requirements

• 6-15 years of combined experience in the IT field
• Practical, hands-on background with Akamai (WAF, Kona Site Defender, or comparable Akamai security tools)
• Solid grasp of web application security principles (OWASP Top 10, DDoS mitigation, bot management)
• Background in fine-tuning WAF rules and managing false positives
• Real-world experience responding to security incidents
• Capacity to operate independently while quickly adapting to a new team environment
• Strong English communication abilities

Nice to have

• Exposure to alternative WAF/CDN platforms (Cloudflare, F5, Imperva)
• Knowledge of API security practices
• Relevant security certifications (CISSP, CEH, GWAPT)