Edge Security Engineer - Akamai & Web App Defense

CVS Health; Sacramento (CA); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Paid time off

Retirement savings options

Job summary

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize Akamai and edge security controls protecting enterprise web applications and APIs. You will work with cross-functional teams to strengthen the digital perimeter, respond to threats, and continuously improve security practices.

In this full-time role, you will manage WAF, bot protection, DDoS mitigation, DNS security, and certificate management while collaborating with application, cloud, and network teams.

Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years hands-on with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years of working knowledge: Web Application Firewalls (WAF), Bot management and DDoS mitigation, Web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, andor Linux-based environments.
• 2+ years of experience analyzing security telemetry, identify attack patterns, troubleshoot complex issues, and implement effective countermeasures.

Responsibilities

• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
• Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
• Configure and tune managed and custom WAF protections, rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
• Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
• Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues.
• Perform root cause analysis and implement corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Partner with application, cloud, infrastructure, networking, and security teams on application onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Skills

Security engineering

Akamai security

WAF & bot protection

Incident response

Threat intelligence

Security monitoring

Education

Bachelor's degree

Tools

Akamai security tools

Imperva Website Security

Splunk

Grafana

Job description

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize Akamai and edge security controls protecting enterprise web applications and APIs. You will work with cross-functional teams to strengthen the digital perimeter, respond to threats, and continuously improve security practices.

In this full-time role, you will manage WAF, bot protection, DDoS mitigation, DNS security, and certificate management while collaborating with application, cloud, and network teams.