Senior Security Engineer – Akamai & Edge Security Services

Cybersecurity Jobs; Atlanta (GA); On-site; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement options

Wellness program

Bonus eligibility

Job summary

CVS Health seeks a Senior Security Engineer focused on Akamai and Edge Security Services to design, implement, and optimize controls for enterprise web apps, APIs, and internet-facing services. The role collaborates across application, cloud, infrastructure, network, and security teams and participates in a rotating on-call schedule.

The position requires 5+ years in security with 3+ years in Akamai. On-site in Atlanta, GA, with competitive pay and benefits.

Qualifications

• 5+ years in enterprise web app, API, or edge security.
• 3+ years Akamai security technologies or comparable platforms.
• 3+ years across WAF, bot management, DDoS mitigation, HTTP/HTTPS, DNS, TLS, OWASP Top 10, Linux.
• 2+ years analyzing security telemetry and countermeasures.

Responsibilities

• Administer Akamai security technologies and related services (WAF, Bot Manager Premier, AS Engine, Client Reputation, DDoS protections).
• Design and maintain security controls protecting web apps, APIs, and internet-facing services.
• Investigate and resolve security incidents and platform issues with root-cause analysis.

Skills

Security engineering

Akamai security

WAF & DDoS

Telemetry analysis

Education

Bachelor's degree

Tools

Akamai WAF

Imperva Website Security

Splunk

Grafana

CI/CD

Linux

Job description

As a Senior Security Engineer focused on Akamai and Edge Security Services, you will design, implement, administer, and optimize security controls that protect enterprise web applications, APIs, and internet-facing services. The role collaborates across application, cloud, infrastructure, network, and security teams and participates in a rotating on-call schedule.

Role Responsibilities

• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
• Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
• Configure and tune managed and custom WAF protections, including rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
• Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
• Monitor Akamai security telemetry and platforms such as Splunk and Grafana for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues, including root cause analysis and corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Partner with application, cloud, infrastructure, networking, and security teams on application onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Monitoring and Incident Response

• Monitor Akamai security telemetry and related platforms, including Splunk and Grafana, for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues.
• Perform root cause analysis and implement corrective actions.
• Provide technical escalation support for critical security events and production issues.

Required Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years of working knowledge across WAF, bot management and DDoS mitigation, web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, and Linux-based environments.
• 2+ years of experience analyzing security telemetry, identifying attack patterns, troubleshooting complex issues, and implementing countermeasures.

Preferred Qualifications

• Experience with Akamai Bot Manager Premier, Adaptive Security Engine, Account Protector, Client Reputation, SiteShield, GTM, and CPS.
• Experience with Imperva Website Security.
• Experience with Splunk, Grafana, and enterprise security-monitoring platforms.
• Knowledge of cloud security, DevSecOps, CI/CD integration, APIs, and security automation.
• Experience protecting large-scale internet-facing applications and APIs.
• Strong analytical, communication, and problem-solving skills.

Technologies

• Akamai
• Web Application Firewall (WAF)
• Bot Manager Premier
• Adaptive Security Engine
• Client Reputation
• Account Protector
• Imperva Website Security
• DDoS protections
• Splunk
• Grafana
• HTTP/HTTPS
• TCP/IP
• DNS
• SSL/TLS
• OWASP Top 10
• Linux
• CI/CD

Education

Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience).

On-Call and Work Schedule

• Anticipated weekly hours: 40
• Time type: Full time
• On-call / after-hours support: Rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes.

Compensation

Pay range: USD 83,430 - 222,480 per year. The typical pay range for this role is: $83,430.00 - $222,480.00. Eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.

Location

Atlanta, GA (onsite).

Benefits

• Medical, dental, and vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families (based on eligibility)
• Eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above

Application Window

We anticipate the application window for this opening will close on 10/19/2026.

Criminal Records Consideration

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.