Security Engineer, Web Application Security

Yum! Brands; United States; Remote; USD 110,000 - 150,000; Full time

Job summary

Yum! Brands is seeking a cybersecurity professional to configure and support WAF protections with Akamai, monitor for attacks, and manage CDN/edge security. You will renew TLS certs, assist in incident response, and write automation scripts to improve operations. Collaboration with Security Operations, Compliance, and Cloud Engineering is essential.

The role requires 2–4+ years in security, networking, or cloud engineering, plus hands-on experience with Akamai or similar platforms.

Qualifications

• Bachelor's degree in CS, cybersecurity, IT, or equivalent.
• 2–4+ years in cybersecurity, networking, or cloud engineering.
• Foundational understanding of reverse proxies, CDN concepts, REST APIs, and web apps.
• Knowledge of TCP/IP, DNS, TLS/SSL, and HTTP/HTTPS.
• Familiarity with WAF technologies and common threats.
• Strong troubleshooting using logs and diagnostics.
• Clear written and verbal communication.

Responsibilities

• Configure, maintain, and support WAF protections using Akamai App & API Protector.
• Monitor and investigate web security events including Layer 7 attacks and DDoS.
• Manage CDN and edge security configurations, including caching and origin connectivity.
• Support lifecycle management of public TLS certificates, including renewal.
• Participate in incident response activities and on-call rotations.
• Develop automation scripts using Python, PowerShell, or Bash.
• Collaborate with Security Operations, Compliance, and Cloud Engineering.
• Maintain technical documentation, troubleshooting guides, and runbooks.
• Support PCI DSS and internal audit activities through evidence gathering.

Skills

Cybersecurity fundamentals

Networking concepts

Cloud infrastructure

Troubleshooting

Education

Bachelor's degree in Computer Science or related field

Tools

Akamai WAF

Bot Manager

Edge DNS

Cloudlets

Splunk / SIEM

Git / IaC

Job description

Responsibilities

• Configure, maintain, and support Web Application Firewall (WAF) protections using Akamai App & API Protector
• Monitor and investigate web security events including Layer 7 attacks, DDoS, and OWASP Top 10 vulnerabilities
• Manage CDN and edge security configurations, including caching, DNS, and origin connectivity
• Support the lifecycle management of public TLS certificates, including renewal, deployment, and validation
• Participate in incident response activities and on-call rotations for globally distributed applications
• Develop automation scripts using Python, PowerShell, or Bash to improve operational processes
• Collaborate with cross-functional teams including Security Operations, Compliance, and Cloud Engineering
• Maintain technical documentation, troubleshooting guides, and runbooks
• Support PCI DSS and internal audit activities through technical evidence gathering

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience
• 2-4+ years of experience in cybersecurity, networking, infrastructure, or cloud engineering
• Foundational understanding of reverse proxies, CDN concepts, REST APIs, and web applications
• Knowledge of TCP/IP, DNS, TLS/SSL, and HTTP/HTTPS
• Familiarity with WAF technologies and common web security threats
• Strong technical troubleshooting skills using logs and diagnostic information
• Strong written and verbal communication skills

Preferred Qualifications

• Hands-on experience with Akamai or similar WAF/CDN platforms
• Experience with Akamai technologies like Bot Manager, Cloudlets, and Edge DNS
• Experience with public TLS certificate management
• Experience working with cloud environments such as AWS, Azure, or GCP
• Experience with SIEM or log analysis platforms like Splunk or Sentinel
• Basic scripting experience with Python, PowerShell, or Bash
• Experience working with REST APIs
• Familiarity with Git, Infrastructure-as-Code, or DevOps practices
• Security certifications such as Security+, GSEC, or Akamai certifications