WAF & Cloud Security Engineer – AI & API Protection

AllianceIT Inc; New York (NY); On-site; USD 120,000 - 160,000; Full time

Job summary

AllianceIT Inc. is seeking an on-site Security Engineer/Program Manager to lead WAF onboarding for internet-facing applications, tune policies, and address AI/LLM traffic protections.

The role collaborates across application, DNS, load balancer, and security teams to ensure testing, rollout plans, and secure de-risking strategies. Responsibilities include analyzing WAF events, mitigating false positives, and coordinating quarterly reviews and platform upgrades to align with threat intelligence.

Qualifications

• Experience with web application firewalls (WAF) onboarding, tuning, and monitoring.
• Ability to analyze false positives and adjust policies with minimal business impact.
• Familiarity with AI/LLM traffic protections and API security controls.

Responsibilities

• Lead onboarding of applications to Akamai WAF and migrate to monitor/deny modes.
• Tune security policies to balance protection with business impact.
• Troubleshoot AI/LLM traffic and design compensating controls for protections.
• Review WAF events and threats to determine malicious vs legitimate activity; propose mitigations.
• Conduct quarterly security reviews, policy upgrades, and threat elevation activities.
• Advise on secure web architectures, OWASP protections, and DDoS controls.
• Coordinate program governance with stakeholders and track remediation actions.
• Produce security metrics dashboards covering API discovery, exceptions, and risk reduction.

Skills

Akamai WAF

WAF Onboarding

WAF Policy Tuning

AI security

API security

OWASP protections

DDoS protection

Threat analysis

Program management

Tools

Akamai

Job description

AllianceIT Inc. is seeking an on-site Security Engineer/Program Manager to lead WAF onboarding for internet-facing applications, tune policies, and address AI/LLM traffic protections.

The role collaborates across application, DNS, load balancer, and security teams to ensure testing, rollout plans, and secure de-risking strategies. Responsibilities include analyzing WAF events, mitigating false positives, and coordinating quarterly reviews and platform upgrades to align with threat intelligence.