Akamai Security Engineer

MARICI Solutions GmbH; New York (NY); On-site; USD 130,000 - 180,000; Full time

Job summary

MARICI Solutions GmbH in New York seeks a WAF / Akamai Security Engineer to lead onboarding of internet-facing applications onto Akamai WAF and to coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.

You will analyze WAF events, tune policies to balance protection with business needs, review blocked requests, and collaborate with AI security features, vendors, and internal teams to implement compensating controls and API protections.

Responsibilities

• Lead onboarding of internet-facing applications to Akamai WAF.
• Coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.
• Analyze production traffic and WAF events to identify false positives.
• Tune security policies to reduce business impact while maintaining strong protection.
• Review blocked requests, investigate application behavior, and create narrowly scoped exceptions when justified.
• Troubleshoot AI- and LLM-related traffic that triggers WAF protections.
• Work with application teams and vendors to design compensating controls, header-based attestation mechanisms, and API-specific protections.
• Evaluate emerging Akamai AI security capabilities, including AI-powered detections, Firewall for AI, bot identification, and agentic AI protections.
• Review WAF, Bot Manager, DDoS, Client Reputation, and API Security events.
• Analyze attack patterns and determine whether activity is malicious or legitimate.
• Recommend policy improvements and mitigations based on observed threats.
• Conduct structured reviews of applications protected by Akamai and evaluate opportunities to move to mitigation mode.
• Perform quarterly WAF upgrades, policy reviews, and security-control tuning to keep protections aligned with current threat intelligence.
• Assist with production incidents where application behavior changes after WAF enablement.
• Investigate latency issues, traffic-routing problems, load-balancer interactions, client IP handling, surge queue events, and application outages.
• Coordinate with Akamai engineering resources and internal teams to identify root causes and corrective actions.
• Advise application teams on secure web architectures, OWASP protections, API security, bot mitigation, client reputation controls, and DDoS protection.
• Provide guidance on onboarding, secure application design, and remediation of web vulnerabilities.
• Partner with application owners, infrastructure teams, auditors, risk managers, and security leadership.
• Track onboarding progress, risks, dependencies, and remediation activities through program governance and ticketing systems.
• Present status updates, metrics, risks, and remediation plans to senior management.
• Produce dashboards and reporting covering API discovery, security exceptions, and act as the primary interface between the enterprise and Akamai.
• Engage Akamai product teams on product defects, enhancement requests, AI roadmap discussions, policy recommendations, and complex troubleshooting.
• Evaluate new Akamai capabilities and coordinate pilot deployments where appropriate.

Job description

WAF / Akamai Security Engineer

• WAF Onboarding & Application Migration
• Lead onboarding of internet-facing applications to Akamai WAF.
• Work with application, DNS, load balancer, proxy, firewall, and QA teams to migrate applications into monitor/alert mode and ultimately deny mode.
• Coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.
• WAF Policy Tuning & False Positive Analysis
• Analyze production traffic and WAF events to identify false positives.
• Tune security policies to reduce business impact while maintaining strong protection.
• Review blocked requests, investigate application behavior, and create narrowly scoped exceptions when justified.
• AI, LLM & API Security Support
• Troubleshoot AI- and LLM-related traffic that triggers WAF protections, such as SQL injection controls.
• Work with application teams and vendors to design compensating controls, header-based attestation mechanisms, and API-specific protections.
• Evaluate emerging Akamai AI security capabilities, including AI-powered detections, Firewall for AI, bot identification, and agentic AI protections.
• Security Event Monitoring & Threat Analysis
• Review WAF, Bot Manager, DDoS, Client Reputation, and API Security events.
• Analyze attack patterns and determine whether activity is malicious or legitimate.
• Recommend policy improvements and mitigations based on observed threats.
• Quarterly Security Reviews & Platform Upgrades
• Conduct structured reviews of applications protected by Akamai.
• Evaluate opportunities to move applications from monitoring to mitigation mode.
• Perform quarterly WAF upgrades, policy reviews, and security-control tuning to keep protections aligned with current threat intelligence.
• Assist with production incidents where application behavior changes after WAF enablement.
• Investigate latency issues, traffic-routing problems, load-balancer interactions, client IP handling, surge queue events, and application outages.
• Coordinate with Akamai engineering resources and internal teams to identify root causes and corrective actions.
• Security Architecture & Design Consulting
• Advise application teams on secure web architectures, OWASP protections, API security, bot mitigation, client reputation controls, and DDoS protection.
• Provide guidance on best practices for onboarding, secure application design, and remediation of web vulnerabilities.
• Program Management & Stakeholder Engagement
• Partner with application owners, infrastructure teams, auditors, risk managers, and security leadership.
• Track onboarding progress, risks, dependencies, and remediation activities through program governance and ticketing systems.
• Present status updates, metrics, risks, and remediation plans to senior management.
• Operational Metrics & Reporting
• Produce dashboards and reporting covering:
• API discovery
• Security exceptions
• Act as the primary interface between the enterprise and Akamai.
• Engage Akamai product teams on product defects, enhancement requests, AI roadmap discussions, policy recommendations, and complex troubleshooting.
• Evaluate new Akamai capabilities and coordinate pilot deployments where appropriate.