Security Engineering ambito WAF
Core
Security Engineer specializing in hands-on management, tuning, and continuous improvement of Web Application Firewall (WAF) protections for web applications and APIs in Enterprise contexts.
Role type
Senior IC Security Engineer (WAF)
Builds
Production WAF policies and security controls for web applications and APIs
Domain
Cybersecurity / Web Application Security
Required skills
WAF policy management and tuning, Akamai WAF expertise, log analysis, incident response, HTTP/TLS/DNS/CDN knowledge, OWASP Top 10 and API Top 10 understanding, bot management, change management in Enterprise environments
Preferred skills
API Security, Kong/API Gateway, Akamai CLI/API, Python, Terraform
Technologies
Akamai WAF, Akamai Bot Manager, Cloudflare, AWS WAF, F5, Imperva, HTTP, TLS, DNS, CDN, Reverse Proxy
Responsibilities
Manage, configure, and tune WAF policies; Analyze logs and rules to resolve false positives; Onboard new hostnames and transition policies from alert-only to blocking/enforcement; Manage and tune Akamai Bot Manager, Client Reputation, and DDoS/rate limiting controls; Provide operational support for Edge protection incidents; Validate and manage WAF changes in coordination with development teams; Produce technical reporting, documentation, and runbooks
Seniority
Mid-level (1–3 years experience), hands-on IC
