Akamai & AWS WAF Security Engineer

Experience: 6–8 Years

Location: Hyderabad, India (On-site)

Role: Senior Security Engineer

Job Summary We are looking for a Senior Security Engineer with strong hands-on experience in Akamai and AWS WAF to manage, tune, and troubleshoot web application and API security controls across production and non-production environments.

Key Responsibilities

• Manage Akamai App & API Protector/Kona Site Defender, Property Manager, Bot Manager, Client Reputation, Rate Controls, and IP/Network Lists.
• Configure and tune AWS WAF Web ACLs, managed/custom rules, rate-based rules, IP sets, and Firewall Manager policies.
• Perform WAF False Positive/False Negative analysis, rule tuning, exclusions, and security optimization.
• Monitor and investigate DoS/DDoS, bot attacks, API abuse, scanners, scrapers, and application-layer attacks.
• Analyze Akamai and AWS WAF logs using SIEM platforms such as Elastic, Splunk, or Sentinel.
• Troubleshoot WAF issues involving CloudFront, API Gateway, ALB, Route 53, and application traffic.
• Implement targeted security controls based on IP, ASN, Geo, URI/path, headers, User-Agent, and request patterns.
• Support security incidents, emergency mitigations, RCA, and post-incident improvements.
• Automate WAF operational tasks using Python, REST APIs, Terraform, or AWS CLI.
• Collaborate with SOC, Application, Cloud, Network, and DevOps teams.

Required Skills

• 6–8 years of cybersecurity/WAF experience.
• Strong hands-on experience with Akamai WAF and AWS WAF.
• Good understanding of OWASP Top 10, HTTP/HTTPS, API security, and DDoS protection.
• Experience with WAF tuning, FP/FN analysis, bot management, and rate controls.
• Experience with CloudFront, API Gateway, ALB, and AWS Firewall Manager.
• Strong troubleshooting, analytical, and incident-response skills.
• Knowledge of Python, REST APIs, Terraform, and SIEM is preferred.

Preferred Certifications

• AWS Security Specialty / Solutions Architect
• Akamai Security Certification
• CISSP / CEH / CCSP