Edge Security Engineer – Akamai & WAF Specialist

CVS Health; Hartford (CT); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Retirement savings plan

Paid time off

Job summary

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize edge security across Akamai and Imperva platforms. You will work with application, cloud, infrastructure, and security teams to protect web apps, APIs, and internet-facing services.

The role involves on-call rotation about once every six weeks and occasional after-hours support for critical incidents. A Bachelor's degree and 5+ years of relevant experience are required, with strong emphasis on WAF, bot

Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years of working knowledge: Web Application Firewalls (WAF), Bot management and DDoS mitigation, Web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, andor Linux-based environments.
• 2+ years of experience analyzing security telemetry, identify attack patterns, troubleshoot complex issues, and implement effective countermeasures.

Responsibilities

• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
• Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
• Configure and tune managed and custom WAF protections, rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
• Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
• Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues.
• Perform root cause analysis and implement corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Collaborate with application, cloud, infrastructure, networking, and security teams on onboarding and improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Skills

Akamai security technologies

WAF & bot protection

Edge security & API security

Security telemetry analysis

DDoS mitigation

Education

Bachelor's degree

Tools

Splunk

Grafana

Akamai technologies

Imperva Website Security

Job description

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize edge security across Akamai and Imperva platforms. You will work with application, cloud, infrastructure, and security teams to protect web apps, APIs, and internet-facing services.

The role involves on-call rotation about once every six weeks and occasional after-hours support for critical incidents. A Bachelor's degree and 5+ years of relevant experience are required, with strong emphasis on WAF, bot