Senior Security Engineer – Akamai & Edge Security Services

9025 CVS Shared Services Resources LLC; United States; Sur place; USD 83 000 - 222 000; Plein temps

Avantages offerts par ce poste

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Résumé du poste

CVS Health is hiring a Senior Security Engineer – Akamai & Edge Security Services to design, implement, and optimize security controls for enterprise web apps, APIs, and internet-facing services. You will lead WAF, bot protection, DDoS mitigation, and edge security across cross-functional teams.

The role requires 5+ years in enterprise security, strong Akamai/Imperva experience, and solid telemetry analysis skills.

Qualifications

• 5+ years of enterprise web app, API, or edge security experience.
• 3+ years hands-on with Akamai security technologies or similar WAF platforms.
• 3+ years knowledge: WAF, bot management, DDoS, web/API security, TLS, DNS, OWASP Top 10, Linux environments.
• 2+ years analyzing security telemetry to identify attack patterns and countermeasures.

Responsabilités

• Administer and optimize Akamai security technologies (WAF, Bot Manager Premier, DDoS, etc.).
• Administer Imperva Website Security configurations and integrations.
• Design and maintain security controls for web apps and APIs.
• WAF, Bot & Threat Protection: configure protections, rate limiting, ACLs, API protections, and custom rules.
• Develop bot mitigation controls using behavior analysis and enforcement.
• Investigate and mitigate DDoS attacks and credential stuffing.
• Monitor security telemetry and respond to incidents; perform root cause analysis.
• Collaborate with teams on onboarding and security improvements; support CI/CD security.

Connaissances

Enterprise web security

API security

Edge security

Akamai security

Security telemetry analysis

Formation

Bachelor’s degree in a related field

Outils

Akamai

Imperva Website Security

Splunk

Grafana

Description du poste

We’re building a world of health around every individual - shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger - helping to simplify health care one person, one family and one community at a time.

Position Summary

The Senior Security Engineer – Akamai & Edge Security Services designs, implements, administers, and optimizes security controls that protect enterprise web applications, APIs, and internet-facing services. This role provides senior technical expertise in Web Application Firewall (WAF), bot protection, DDoS mitigation, API security, DNS security, certificate management, and related edge security technologies. The position partners with application, cloud, infrastructure, network, and security teams to strengthen the enterprise digital perimeter, respond to security threats, troubleshoot complex issues, and continuously improve security controls and operational processes. The role participates in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes.

Key Responsibilities

• Security Engineering & Administration
• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
• Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
• WAF, Bot & Threat Protection
• Configure and tune managed and custom WAF protections, rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
• Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
• Monitoring & Incident Response
• Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues.
• Perform root cause analysis and implement corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Collaboration & Continuous Improvement
• Partner with application, cloud, infrastructure, networking, and security teams on application onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Required Qualifications

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years of hands‑on experience with Akamai security technologies or comparable enterprise WAF and application‑security platforms.
• 3+ years of working knowledge: Web Application Firewalls (WAF), Bot management and DDoS mitigation, Web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, andor Linux‑based environments.
• 2+ years of experience analyzing security telemetry, identify attack patterns, troubleshoot complex issues, and implement effective countermeasures.

Preferred Qualifications

• Experience with Akamai Bot Manager Premier, Adaptive Security Engine, Account Protector, Client Reputation, SiteShield, GTM, and CPS.
• Experience with Imperva Website Security.
• Experience with Splunk, Grafana, and enterprise security‑monitoring platforms.
• Knowledge of cloud security, DevSecOps, CI/CD integration, APIs, and security automation.
• Experience in protecting large‑scale internet‑facing applications and APIs.
• Strong analytical, communication, and problem‑solving skills.

Education

Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience)

Anticipated Weekly Hours

40

Time Type

Full time

Pay Range

The typical pay range for this role is: $83,430.00 - $222,480.00 This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.

Great benefits for great people

We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. This full-time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. Additional details about available benefits are provided during the application process and on Benefits Moments.

We anticipate the application window for this opening will close on: 10/19/2026 Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.

Our Work Experience is the combination of everything that's unique about us: our culture, our core values, our company meetings, our commitment to sustainability, our recognition programs, but most importantly, it's our people.

Our employees are self-disciplined, hard working, curious, trustworthy, humble, and truthful. They make choices according to what is best for the team, they live for opportunities to collaborate and make a difference, and they make us the #1 Top Workplace in the area.