Senior Edge Security Engineer – WAF & Bot Protection

CVS Health; Baton Rouge (LA); On-site; USD 83,000 - 222,000; Full time

Job summary

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize security controls for enterprise web applications and APIs at the edge. You will work with Akamai, Imperva, and related technologies, strengthening the digital perimeter and guiding security across developers and operators.

The role requires 5+ years in enterprise security, with hands-on Akamai expertise, and a track record in WAF, bot management, DDoS, and API protection.

Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years hands-on with Akamai security technologies or comparable WAF platforms.
• 3+ years knowledge: WAF, bot management, DDoS, API security, DNS, SSL/TLS, OWASP Top 10, and Linux.
• 2+ years analyzing security telemetry and responding to incidents.

Responsibilities

• Administer and optimize Akamai security technologies (WAF, Bot Manager Premier, DDoS protections).
• Administer Imperva Website Security capabilities and origin integrations.
• Design and maintain security controls for web apps, APIs, and internet-facing services.
• Monitor security telemetry and respond to incidents; perform root-cause analysis.

Skills

Enterprise security experience

Akamai security technologies

WAF & bot protection

DDoS protection & API security

DNS security & SSL/TLS

Telemetry analysis

Education

Bachelor's degree or equivalent

Tools

Akamai security suite

Imperva Website Security

Splunk

Grafana

CI/CD security automation

Job description

CVS Health is seeking a Senior Security Engineer to design, implement, and optimize security controls for enterprise web applications and APIs at the edge. You will work with Akamai, Imperva, and related technologies, strengthening the digital perimeter and guiding security across developers and operators.

The role requires 5+ years in enterprise security, with hands-on Akamai expertise, and a track record in WAF, bot management, DDoS, and API protection.