Cyber Security Engineer

LuxExperience; Italia; On-site; EUR 50,000 - 70,000; Full time

Job summary

LuxExperience is searching for a Cyber Security Engineer who will be the go-to expert for the Akamai Security Platform. This role involves designing, configuring, and optimizing edge security solutions while collaborating with development teams.

Located in Zola Predosa, Italy, this full-time position offers a hybrid working model. The ideal candidate will have significant experience with web application security and Akamai tools, contributing to the security of luxury digital experiences.

Qualifications

• Hands-on experience managing and configuring Akamai security solutions.
• Deep understanding of web application security principles.
• Proficiency in analyzing HTTP/S traffic using various tools.

Responsibilities

• Design, provision, configure and maintain Akamai security configurations.
• Continuously monitor and tune WAF rules to minimize false positives.
• Identify, analyze and mitigate real-time DDoS attacks.

Skills

Akamai Platform Expertise

Web & API Security

Traffic Analysis

Network Protocols

Certificate Management

Tools

Akamai Control Center

Terraform

Python

Job description

Overview

LuxExperience is the leading digital, multi‑brand luxury group and the online shopping destination for luxury enthusiasts worldwide. The group operates a portfolio of distinguished store brands in digital luxury and creates communities for luxury enthusiasts with unique digital and physical experiences.

Location

Our offices in Zola Predosa / Milan, Italy

Department

Infrastructure and Operations – Cyber Security

Reporting

Cyber Security Platform Manager

Working Model & Contract

Hybrid; Permanent

Role Overview

As a specialized Cyber Security Engineer, you will be the go‑to expert for our Akamai Security Platform, driving analysis, technical design, configuration, and continuous tuning of edge security solutions.

Responsibilities

• Edge Security Management: Design, provision, configure and maintain Akamai security configurations, specifically focusing on App & API Protector, Akamai WAF, Bot Manager and Content Protector.
• WAF & Rate Limiting Optimization: Continuously monitor and tune Web Application Firewall (WAF) rules and rate limiting policies to minimize false positives while maintaining a strict security posture against the OWASP Top 10.
• DDoS & Botnet Mitigation: Identify, analyze and mitigate real‑time DDoS attacks and malicious automated bot traffic without disrupting legitimate user traffic or search engine crawlers.
• API Security: Implement and manage security controls tailored for APIs, ensuring positive security models, schema validation and discovery of unmanaged endpoints.
• Cross‑Functional Collaboration: Partner with application developers and product teams to translate business requirements into secure, scalable edge configurations and assist in troubleshooting application‑layer issues.
• Documentation & Automation: Produce clear, comprehensive technical documentation for edge configurations, incident playbooks and operational procedures. Identify opportunities to leverage Akamai CLI, Terraform or APIs to automate configuration management.
• Platform Lifecycle: Manage the lifecycle of security services, including monitoring platform health, reviewing Akamai release updates and implementing platform best practices.

Personal Attributes

• Enjoys collaborating in a team environment and contributes positively to shared goals.
• Communicates effectively in English, both spoken and written, tailoring technical concepts to different audiences.
• Curious, proactive, eager to learn with a willingness to explore new technologies and approaches.
• Manages multiple tasks and priorities, maintaining attention to detail while delivering high‑quality output.
• Comfortable working in dynamic environments and adapting to evolving business and security needs.

Technical Skills & Experience – Core Requirements

• Akamai Platform Expertise: Hands‑on experience managing and configuring Akamai security solutions (App & API Protector, Bot Manager, Client‑Side Protection, Edge DNS).
• Web & API Security: Deep understanding of web application security principles, including the OWASP Top 10 and API Security Top 10.
• Traffic Analysis: Proficiency in analyzing HTTP/S traffic, utilizing web logs, Akamai Control Center or SIEM dashboards to investigate alerts and anomalies.
• Network Protocols: Strong fundamental knowledge of core internet protocols, including TCP/IP, HTTP/HTTPS and advanced DNS administration in enterprise environments.
• Certificate Management: Solid understanding of TLS/SSL certificate lifecycles, renewals and proper implementation at the edge layer.

Secondary / Nice‑to‑Have Experience

• Infrastructure Security: Familiarity with traditional firewall management principles (e.g., Check Point).
• Identity & Access: Exposure to cloud‑based Secure Web Gateways (e.g., Zscaler), Multi‑Factor Authentication (e.g., Duo) or Privileged Access Management (e.g., CyberArk).
• Security as Code: Experience with automation tools or scripting languages (e.g., Python, Bash, Terraform) for managing Akamai configurations is a significant plus.

Equal Opportunity

LuxExperience is an equal opportunities employer; we encourage people with a diverse range of backgrounds to apply. We recognize and celebrate the benefits that diversity brings to our workplace, our business and our customers. We welcome and will consider all applications regardless of race, nationality, religion, color, sex, pregnancy or related medical conditions, parental status, sexual orientation, gender identity, gender expression, age, status as an individual with a disability, or any other legally protected characteristics.

Reasonable Adjustments

If you require any reasonable adjustments to complete your application, please do not hesitate to advise us accordingly.

Workplace Information

Experience Level: Mid‑Senior level. Workplace Type: Hybrid.