Senior Security Engineer

Nortal; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Nortal seeks aSenior Security Engineer to support the TUI project, focusing on Akamai-based security solutions for web apps, APIs, and online services. You will design, deploy, and optimize WAF/CDN/DDoS configurations while coordinating with IT and business teams worldwide.

You will conduct regular security testing, implement robust policies, and monitor security alerts to drive remediation efforts, ensuring compliance with industry standards and best practices.

Qualifications

• 4+ years of experience as a Security Engineer.
• Experience with Akamai or equivalents (WAF, CDN, DDoS) in web security.
• Ability to design and implement security controls across large digital environments.

Responsibilities

• Maintain and develop expertise in Akamai technologies including WAF, CDN, DDoS protection, and Bot Manager Premier.
• Design and deploy Akamai-based security solutions to protect web applications, APIs, and online services.
• Collaborate with cross-functional teams to ensure alignment of security objectives and implement best practices in configurations.
• Conduct regular security assessments, vulnerability scanning, and penetration testing to identify threats.
• Implement and manage security policies and controls to ensure compliance with industry standards.
• Monitor Akamai security reports and alerts, investigate incidents, and provide remediation recommendations.

Skills

Akamai technologies

WAF configuration

CDN management

DDoS protection

Bot Manager

Python

Bash

Perl

Encryption concepts

SSL/TLS

VPN

English communication

Tools

Cloudflare

Lumen

Job description

Nortal invites a highly skilled and motivated Senior Security Engineer to join our team for the client TUI – a global tourism business giant! As a Security Engineer, you will play a critical role in maintaining and enhancing the security infrastructure of our client's organization. You will be responsible for designing, implementing, and managing security solutions utilizing Akamai technologies to ensure the protection of TUI digital assets.

About our client

Our client, TUI, is a global business with over 70 000 people on board, great history and challenging plans for building a digital future. TUI is the largest leisure, travel and tourism company globally, and it owns travel agencies, hotels, airlines, cruise ships and retail shops.

About the project

You will join the information security team that works in collaboration with business and IT teams across our many TUI domains. You adopt a pragmatic and ‘can-do’ attitude in everything you do, partnering with your colleagues across the TUI businesses and IT functions worldwide.

Responsibilities

• Maintain and develop expertise in Akamai technologies, including Web Application Firewall (WAF), Content Delivery Network (CDN), and Distributed Denial of Service (DDoS) protection solutions and Bot Manager Premier
• Design and deploy Akamai-based security solutions to protect web applications, APIs, and online services.
• Collaborate with cross-functional teams to ensure alignment of security objectives and implement best practices in Akamai configurations.
• Conduct regular security assessments, vulnerability scanning, and penetration testing to identify and mitigate potential threats.
• Implement and manage security policies and controls to ensure compliance with industry standards and regulations.
• Monitor Akamai security reports and alerts, investigate security incidents, and provide recommendations for remediation.

Qualifications

• 4+ years of experience as a Security Engineer
• In-depth knowledge of Akamai technologies or it’s analogs Cloudflare or Lumen) and their application in web security, DDoS protection, and CDN services
• Strong expertise in configuring and managing Akamai Web Application Firewall (WAF), Bot Manager, and CDN configurations (or it’s analogs Cloudflare, Lumen)
• Familiarity with security protocols, encryption technologies, and network security concepts (SSL/TLS, IPSec, VPN).
• Hands‑on experience in implementing and managing security policies
• Solid understanding of application and network-layer attacks and mitigation techniques
• Experience with scripting languages (e.g., Python, Perl, Bash) for automation and data analysis
• Experience with data driven technology
• High level of English
• Effective communication and collaboration skills