Edge Security Engineer — WAF, Bot & API Protection

CVS Health; Helena (MT); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Senior Security Engineer for Akamai & Edge Security Services to design, implement, and optimize security controls for enterprise web applications, APIs, and internet-facing services. You will work with cross-functional teams to strengthen the digital perimeter and respond to threats.

The role includes on-call rotation approximately every six weeks, with after-hours support for critical incidents.

Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years of working knowledge: Web Application Firewalls (WAF), Bot management and DDoS mitigation, Web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, and/or Linux-based environments.
• 2+ years of experience analyzing security telemetry, identify attack patterns, troubleshoot complex issues, and implement effective countermeasures.

Responsibilities

• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
• Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
• Configure and tune managed and custom WAF protections, rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
• Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
• Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues.
• Perform root cause analysis and implement corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Partner with application, cloud, infrastructure, networking, and security teams on onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Skills

Security engineering

Threat detection

Incident response

CI/CD integration

Education

Bachelor's degree

Tools

Akamai security technologies

Imperva Website Security

Splunk

Grafana

Job description

CVS Health is seeking a Senior Security Engineer for Akamai & Edge Security Services to design, implement, and optimize security controls for enterprise web applications, APIs, and internet-facing services. You will work with cross-functional teams to strengthen the digital perimeter and respond to threats.

The role includes on-call rotation approximately every six weeks, with after-hours support for critical incidents.