Senior/Lead Security Engineer - AKAMAI

EPAM Systems; Maharashtra; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

EPAM Systems seeks a seasoned Senior/Lead Security Engineer to collaborate with the client’s security team on web application protection and security operations.

You will partner with the wider security group to implement robust controls and respond to threats, including setting up and tuning Akamai WAF rules, investigating incidents, and evaluating configurations to maintain a strong security posture for web applications.

Qualifications

• 6–15 years of total IT experience.
• Experience with Akamai WAF or Kona Site Defender or similar Akamai security tools.
• Solid grasp of web application security principles (OWASP Top 10, DDoS mitigation, bot management).
• Background in tuning WAF rules and managing false positives.
• Hands-on experience responding to security incidents.
• Ability to work autonomously within an existing team.
• Strong English communication abilities.

Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai.
• Engage in handling, investigating, and resolving security incidents connected to web application threats.
• Perform assessments of WAF configurations, security policies, and overall web application security posture.
• Detect and evaluate attack patterns, irregularities, and vulnerabilities affecting web applications.
• Offer ongoing support to the security team by contributing expertise and best practices in web application security.

Skills

Security incident response

Web application security

Autonomous work

English communication

Tools

Akamai WAF

Kona Site Defender

Cloudflare

F5

Imperva

Job description

We are seeking a seasoned Senior/Lead Security Engineer to collaborate with and assist the client's security team. This specialist will partner closely with the wider security team, focusing on essential aspects of web application protection and security operations.
Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai
• Engage in handling, investigating, and resolving security incidents connected to web application threats
• Perform assessments of WAF configurations, security policies, and overall web application security posture
• Detect and evaluate attack patterns, irregularities, and vulnerabilities affecting web applications
• Offer ongoing support to the security team by contributing expertise and best practices in web application security

Requirements

• 6-15 years of total experience in the IT field
• Direct experience working with Akamai (WAF, Kona Site Defender, or comparable Akamai security tools)
• Solid grasp of web application security principles (OWASP Top 10, DDoS mitigation, bot management)
• Background in tuning WAF rules and managing false positives
• Hands-on experience responding to security incidents
• Capacity to work autonomously while quickly adapting to an existing team dynamic
• Strong English communication abilities

Nice to have

• Exposure to additional WAF/CDN platforms (Cloudflare, F5, Imperva)
• Knowledge of API security practices
• Relevant security certifications (CISSP, CEH, GWAPT)