Senior/Lead Security Engineer - AKAMAI

EPAM Systems Inc; India; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

EPAM Systems Inc is seeking a seasoned Senior/Lead Security Engineer to join the client's security team, focusing on web application protection and security operations. You will work closely with the wider security team to address critical areas.

Responsibilities include configuring Akamai WAF rules, investigating incidents, assessing WAF configurations, detecting threats, and sharing best practices in web app security. Strong English communication and ability to work independently are essential.

Qualifications

• 6-15 years of combined experience in the IT field.
• Hands-on Akamai WAF experience (Kona Site Defender or equivalent).
• Strong knowledge of web application security (OWASP Top 10, DDoS mitigation, bot management).
• Experience fine-tuning WAF rules and reducing false positives.
• Experience responding to security incidents in real-world settings.
• Ability to work independently in a new team environment.
• Excellent English communication skills.
• Exposure to other WAF/CDN platforms (Cloudflare, F5, Imperva).
• Knowledge of API security practices.
• Relevant security certifications (CISSP, CEH, GWAPT).

Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai.
• Investigate and resolve security incidents involving web applications.
• Assess WAF configurations, security policies, and overall security posture of web apps.
• Detect attack patterns, anomalies, and vulnerabilities in web applications.
• Provide ongoing expertise and best practices in web application security to the security team.

Skills

Web application security

Incident response

English communication

WAF tuning

Threat intelligence

Cloud/CDN familiarity

Tools

Akamai Kona Site Defender

Cloudflare

F5

Imperva

Job description

We're seeking a seasoned Senior/Lead Security Engineer to become part of and provide support to the client's security team. The specialist will collaborate closely with the wider security team, addressing critical areas including web application protection and security operations.

Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai
• Take part in handling, investigating, and resolving security incidents connected to web application threats
• Perform assessments of WAF configurations, security policies, and the overall security posture of web applications
• Detect and examine attack patterns, anomalies, and vulnerabilities affecting web applications
• Offer ongoing support to the security team by contributing expertise and best practices in web application security

Requirements

• 6-15 years of combined experience in the IT field
• Practical, hands-on background with Akamai (WAF, Kona Site Defender, or comparable Akamai security tools)
• Solid grasp of web application security principles (OWASP Top 10, DDoS mitigation, bot management)
• Background in fine-tuning WAF rules and managing false positives
• Real-world experience responding to security incidents
• Capacity to operate independently while quickly adapting to a new team environment
• Strong English communication abilities
• Nice to have Exposure to alternative WAF/CDN platforms (Cloudflare, F5, Imperva)
• Knowledge of API security practices
• Relevant security certifications (CISSP, CEH, GWAPT)