Edge Security Engineer - Akamai & WAF Expert

Colorado Psychiatric; Denver (CO); Sur place; USD 83 000 - 222 000; Plein temps

Résumé du poste

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize edge security controls for enterprise web apps and APIs. You will work with Akamai, Imperva, and monitoring tools to protect the digital perimeter while supporting CI/CD integrations and incident response.

The role requires strong expertise in WAF, bot protection, DDoS mitigation, and certificate management, with collaboration across application, cloud, and network teams.

Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years of hands‑on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years of working knowledge: WAF, bot management, DDoS mitigation, web/API security, HTTP/HTTPS, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, Linux-based environments.

Responsabilités

• Administer and optimize Akamai security technologies including WAF and Bot Manager Premier.
• Configure and tune WAF protections, rate limiting, IP/geographic controls, API protections, and custom security rules.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other threats.
• Monitor security telemetry and investigate incidents; perform root cause analysis and implement fixes.
• Collaborate with teams to integrate security controls into CI/CD and application delivery processes.

Connaissances

Akamai security

WAF

Bot management

DDoS mitigation

API security

DNS security

TLS/SSL

Linux

Formation

Bachelor's degree

Outils

Akamai

Imperva

Splunk

Grafana

Description du poste

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize edge security controls for enterprise web apps and APIs. You will work with Akamai, Imperva, and monitoring tools to protect the digital perimeter while supporting CI/CD integrations and incident response.

The role requires strong expertise in WAF, bot protection, DDoS mitigation, and certificate management, with collaboration across application, cloud, and network teams.