Akamai Engineer with WAF and BOT Manager

Strategic Resources International Inc; New York (NY); Sur place; USD 140 000 - 190 000; Plein temps

Résumé du poste

Strategic Resources International Inc. is seeking a security-focused professional to lead onboarding of internet-facing applications to the Akamai WAF and manage migration from monitor to denial modes.

You will coordinate cross-functional teams, refine security policies, analyze events, and implement compensating controls while engaging Akamai engineering for complex troubleshooting and pilot deployments.

Qualifications

• Experience onboarding applications to Akamai WAF and migrating to monitor/deny mode.
• Ability to coordinate testing, rollout plans, traffic cutovers, validation and rollback procedures.
• Strong understanding of web application security, OWASP principles and API protections.

Responsabilités

• Lead onboarding of internet-facing applications to Akamai WAF.
• Collaborate with application, DNS, load balancer, proxy, firewall and QA teams for migrations.
• Tune WAF policies to reduce business impact while maintaining protection.
• Review blocked requests and craft justified exceptions as needed.
• Analyze WAF events to identify false positives and adjust rules.
• Coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.
• Engage Akamai engineering resources for root-cause analysis and remediation.
• Advise on secure web architectures, API security, bot mitigation and DDoS protection.
• Track onboarding progress, risks, and remediation actions through governance and ticketing systems.
• Produce dashboards on API discovery, security exceptions, and control effectiveness.

Outils

Akamai WAF

Bot Manager

DDoS protection tooling

Description du poste

Job Description

• WAF Onboarding & Application Migration
• Lead onboarding of internet-facing applications to Akamai WAF.
• Work with application, DNS, load balancer, proxy, firewall, and QA teams to migrate applications into monitor/alert mode and ultimately deny mode.
• Coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.
• WAF Policy Tuning & False Positive Analysis
• Analyze production traffic and WAF events to identify false positives.
• Tune security policies to reduce business impact while maintaining strong protection.
• Review blocked requests, investigate application behavior, and create narrowly scoped exceptions when justified.
• AI, LLM & API Security Support
• Troubleshoot AI- and LLM-related traffic that triggers WAF protections, such as SQL injection controls.
• Work with application teams and vendors to design compensating controls, header-based attestation mechanisms, and API-specific protections.
• Evaluate emerging Akamai AI security capabilities, including AI-powered detections, Firewall for AI, bot identification, and agentic AI protections.
• Security Event Monitoring & Threat Analysis
• Review WAF, Bot Manager, DDoS, Client Reputation, and API Security events.
• Analyze attack patterns and determine whether activity is malicious or legitimate.
• Recommend policy improvements and mitigations based on observed threats.
• Quarterly Security Reviews & Platform Upgrades
• Conduct structured reviews of applications protected by Akamai.
• Evaluate opportunities to move applications from monitoring to mitigation mode.
• Perform quarterly WAF upgrades, policy reviews, and security-control tuning to keep protections aligned with current threat intelligence.
• Assist with production incidents where application behavior changes after WAF enablement.
• Investigate latency issues, traffic-routing problems, load-balancer interactions, client IP handling, surge queue events, and application outages.
• Coordinate with Akamai engineering resources and internal teams to identify root causes and corrective actions.
• Security Architecture & Design Consulting
• Advise application teams on secure web architectures, OWASP protections, API security, bot mitigation, client reputation controls, and DDoS protection.
• Provide guidance on best practices for onboarding, secure application design, and remediation of web vulnerabilities.
• Program Management & Stakeholder Engagement
• Partner with application owners, infrastructure teams, auditors, risk managers, and security leadership.
• Track onboarding progress, risks, dependencies, and remediation activities through program governance and ticketing systems.
• Present status updates, metrics, risks, and remediation plans to senior management.
• Operational Metrics & Reporting
• Produce dashboards and reporting covering:
• API discovery
• Security exceptions
• Measure onboarding progress, control effectiveness, and risk reduction across the organization.
• Act as the primary interface between the enterprise and Akamai.
• Engage Akamai product teams on product defects, enhancement requests, AI roadmap discussions, policy recommendations, and complex troubleshooting.
• Evaluate new Akamai capabilities and coordinate pilot deployments where appropriate.