WAF & AI Security Engineer - Onsite NYC/GA

Virtusa; Atlanta (GA); On-site; USD 120,000 - 190,000; Full time

Job summary

Virtusa is seeking a WAF / Akamai Security Engineer to onsite in NYC, NY or Alpharetta, GA three days a week. The role focuses on onboarding internet-facing apps to Akamai WAF, tuning policies, and supporting AI security and API protections.

The candidate will work with application, DNS, load balancer, proxy, and QA teams to migrate to monitor and deny modes, analyze threats, and lead quarterly upgrades and platform enhancements with Akamai engineering resources.

Qualifications

• Lead onboarding of internet-facing applications to Akamai WAF and migrate to monitor/deny modes.
• Tune security policies to minimize business impact while maintaining strong protection.
• Address AI/LLM traffic protections and design compensating controls with application teams.

Responsibilities

• Onboard applications to Akamai WAF and migrate to deny mode as needed.
• Coordinate testing, rollout plans, traffic cutovers, validation and rollback procedures.
• Tune WAF policies based on false positives and observed traffic patterns.
• Troubleshoot AI/LLM traffic triggering protections and collaborate with vendors.
• Evaluate Akamai AI security capabilities and coordinate pilot deployments where appropriate.
• Review WAF events (Bot Manager, DDoS, API Security) and recommend mitigations.
• Advise on secure web architectures including OWASP protections and API security.
• Engage stakeholders, track onboarding progress, and report status to security leadership.
• Produce metrics on onboarding progress, control effectiveness, and risk reduction.

Skills

WAF

Akamai

API security

Threat analysis

Program management

Tools

Akamai AI security

Bot Manager

Job description

Virtusa is seeking a WAF / Akamai Security Engineer to onsite in NYC, NY or Alpharetta, GA three days a week. The role focuses on onboarding internet-facing apps to Akamai WAF, tuning policies, and supporting AI security and API protections.

The candidate will work with application, DNS, load balancer, proxy, and QA teams to migrate to monitor and deny modes, analyze threats, and lead quarterly upgrades and platform enhancements with Akamai engineering resources.