Senior Web Application Security Engineer

EPAM Systems; United States; A distancia; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

EPAM Systems Inc. is seeking an experienced Senior Web Application Security Engineer to join and support the client's security team. The role focuses on protecting web applications, tuning Akamai WAF rules, and working with the broader security team.

You will review configurations, respond to threats, and share best practices in web application security while collaborating with cross-functional teams to strengthen security operations.

Formación

• 5+ years of hands-on Akamai WAF experience (Kona Site Defender or similar)
• Strong knowledge of web application security concepts and OWASP Top 10
• Experience with WAF rule tuning, false positives, and incident response
• Ability to work independently and integrate quickly into a team
• Proficient English communication skills
• Nice to have experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
• Familiarity with API security and relevant security certifications (CISSP, CEH, GWAPT)

Responsabilidades

• Configure, tune and maintain WAF rules and policies using Akamai
• Participate in security incident handling and resolution for web applications
• Review WAF configurations, security policies and posture
• Identify and analyze attack patterns targeting web apps
• Provide day-to-day support and share best practices in web app security
• Support integration of security processes across the team environment

Conocimientos

OWASP Top 10

DDoS mitigation

Bot management

Security incident response

English communication

Educación

CISSP

CEH

GWAPT

Herramientas

Akamai WAF

Kona Site Defender

Cloudflare

F5

Imperva

Descripción del empleo

Headquarters: Armenia, Belarus, GeorgiaURL: http://epam.com

We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.

Responsibilities

• Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
• Participate in security incident handling, investigation and resolution related to web application threats
• Conduct reviews of WAF configurations, security policies and web application security posture
• Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
• Provide day-to-day support to the security team, sharing expertise and best practices in web app security
• Support integration of security processes across the broader team environment

Requirements

• 5+ years of hands‑on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
• Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
• Experience with WAF rule tuning, false positive management and security incident response
• Capability to work independently and integrate quickly into an existing team
• Proficiency in English communication skills
• Nice to have: Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
• Familiarity with API security
• Security certifications (CISSP, CEH, GWAPT etc.)