Senior Web Application Security Engineer

EPAM Systems; Georgia; Hybrid; USD 46,000 - 69,000; Full time

Benefits offered by this job

Relocation opportunities

Professional certifications & learning

Medical & family care package

Job summary

EPAM Systems is seeking a Senior Web Application Security Engineer to join the client's security team. The role focuses on protecting web applications and supporting security operations across the organization.

The ideal candidate will have strong hands-on Akamai WAF experience, knowledge of OWASP Top 10, and proven ability to tune WAF rules and respond to incidents. Excellent English communication is required, with opportunities to relocate and grow within a global company.

Qualifications

• 5+ years hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
• Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
• Experience with WAF rule tuning, false positive management and security incident response
• Capability to work independently and integrate quickly into an existing team
• Proficiency in English communication skills

Responsibilities

• Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
• Participate in security incident handling, investigation and resolution related to web application threats
• Conduct reviews of WAF configurations, security policies and web application security posture
• Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
• Provide day-to-day support to the security team, sharing expertise and best practices in web app security
• Support integration of security processes across the broader team environment

Skills

Akamai WAF

OWASP Top 10

Security incident response

WAF rule tuning

English communication

Tools

Akamai Kona Site Defender

Job description

We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.

Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi.

Responsibilities

• Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
• Participate in security incident handling, investigation and resolution related to web application threats
• Conduct reviews of WAF configurations, security policies and web application security posture
• Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
• Provide day-to-day support to the security team, sharing expertise and best practices in web app security
• Support integration of security processes across the broader team environment

Requirements

• 5+ years of hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
• Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
• Experience with WAF rule tuning, false positive management and security incident response
• Capability to work independently and integrate quickly into an existing team
• Proficiency in English communication skills

Nice to have

• Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
• Familiarity with API security
• Security certifications (CISSP, CEH, GWAPT etc.)

We offer

• We connect like-minded people
  • Delivering innovative solutions to industry leaders, making a global impact
  • Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
  • Opportunity to work abroad for up to two months per year
  • Relocation opportunities within our offices in 55+ countries
  • Corporate and social events
• We invest in your growth
  • Leadership development, career advising, soft skills and well-being programs
  • Certifications, including GCP, Azure and AWS
  • Unlimited access to EPAM's internal learning database
  • Free English classes with certified teachers
• We cover it all
  • Participation in the Employee Stock Purchase Plan
  • Monetary bonuses for engaging in the referral program
  • Comprehensive medical & family care package
  • Five trust days per year (sick leave without a medical certificate)
  • Benefits package (sports activities, a variety of stores and services)

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.