Senior Security Engineer — WAF & Cloud Security Champion

Yum! Brands; Kansas; On-site; USD 117,800 - 147,600; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

Paid time off

Paid holidays

Volunteer time

Job summary

Yum! Brands is seeking a security-focused professional to design, implement, and optimize WAF protections across our global platforms. You will secure enterprise web apps and APIs, manage TLS certificates, and collaborate with engineering, cloud, and network teams to deliver scalable solutions.

The role emphasizes incident response, automation, and ongoing security improvements, with preferred experience in Akamai or comparable WAF technologies and a strong foundation in web security concepts.

Qualifications

• Design, implement and optimize Web Application Firewall (WAF) protections.
• Secure enterprise web apps and APIs against OWASP Top 10, DDoS, bots, and API attacks.
• Manage CDN configurations and TLS certificate lifecycle.
• Investigate security incidents and tune security policies.

Responsibilities

• Drive automation and operational excellence in security engineering.
• Partner with engineering, cloud, networking, and business teams to deliver secure, scalable solutions.
• Experience with enterprise WAF technologies (Akamai preferred; Cloudflare, Imperva, F5, AWS WAF also considered).
• Strong knowledge of HTTP/S, TLS/SSL, DNS, TCP/IP, CDN architecture, REST APIs, and web app security.

Skills

Web security

OWASP Top10

Akamai WAF

REST APIs security

Cloud security

TLS/SSL

Scripting

Incident response

Automation

Cross-functional collab

Tools

Akamai

Cloudflare

Imperva

F5

AWS WAF

Job description

Yum! Brands is seeking a security-focused professional to design, implement, and optimize WAF protections across our global platforms. You will secure enterprise web apps and APIs, manage TLS certificates, and collaborate with engineering, cloud, and network teams to deliver scalable solutions.

The role emphasizes incident response, automation, and ongoing security improvements, with preferred experience in Akamai or comparable WAF technologies and a strong foundation in web security concepts.