Edge Security Engineer: Akamai, WAF & API Defender

CVS Health; Little Rock (AR); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical, dental, and vision

Paid time off

Wellness programs

Retirement savings options

Job summary

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize edge security controls for web applications, APIs, and internet-facing services. You will work with Akamai, Imperva, and related platforms to enhance the organization’s security perimeter.

The role includes incident response, on-call rotations, and collaboration with security, network, and application teams to improve security controls and CI/CD integration.

Qualifications

• 5+ years in enterprise web application, API, or edge security.
• 3+ years with Akamai security technologies or comparable WAF platforms.
• 3+ years knowledge: WAF, bot management, DDoS, HTTP/HTTPS, DNS, SSL/TLS, OWASP Top 10, Linux.
• 2+ years analyzing security telemetry and mitigating threats.

Responsibilities

• Administer and optimize Akamai security technologies (WAF, Bot Manager Premier, DDoS protections).
• Administer Imperva Website Security configurations and integrations.
• Design and maintain security controls for web apps, APIs, and internet-facing services.
• Tune WAF protections, rate limiting, IP/geographic controls, and API protections.
• Investigate and mitigate threats like DDoS, credential stuffing, and account takeovers.
• Monitor security telemetry and respond to incidents; perform root cause analyses.

Skills

Web security

Akamai security

Telemetry analysis

Incident response

DNS & traffic management

Education

Bachelor's degree

Tools

Akamai security tools

Imperva Website Security

Splunk

Grafana

Job description

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize edge security controls for web applications, APIs, and internet-facing services. You will work with Akamai, Imperva, and related platforms to enhance the organization’s security perimeter.

The role includes incident response, on-call rotations, and collaboration with security, network, and application teams to improve security controls and CI/CD integration.