Senior/Lead Security Engineer - AKAMAI

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We're seeking a seasoned Senior/Lead Security Engineer to become part of and provide support to the client's security team. The specialist will collaborate closely with the wider security team, addressing critical areas including web application protection and security operations.

Responsibilities

• Set up, adjust, and manage Web Application Firewall (WAF) rules and policies through Akamai
• Take part in handling, investigating, and resolving security incidents connected to web application threats
• Perform assessments of WAF configurations, security policies, and the overall security posture of web applications
• Detect and examine attack patterns, anomalies, and vulnerabilities affecting web applications
• Offer ongoing support to the security team by contributing expertise and best practices in web application security

Requirements

• 6-15 years of combined experience in the IT field
• Practical, hands-on background with Akamai (WAF, Kona Site Defender, or comparable Akamai security tools)
• Solid grasp of web application security principles (OWASP Top 10, DDoS mitigation, bot management)
• Background in fine-tuning WAF rules and managing false positives
• Real-world experience responding to security incidents
• Capacity to operate independently while quickly adapting to a new team environment
• Strong English communication abilities

Nice to have

• Exposure to alternative WAF/CDN platforms (Cloudflare, F5, Imperva)
• Knowledge of API security practices
• Relevant security certifications (CISSP, CEH, GWAPT)

We offer

• Opportunity to work on technical challenges that may impact across geographies
• Vast opportunities for self-development: online university, knowledge sharing opportunities globally, learning opportunities through external certifications
• Opportunity to share your ideas on international platforms
• Sponsored Tech Talks & Hackathons
• Unlimited access to LinkedIn learning solutions
• Possibility to relocate to any EPAM office for short and long-term projects
• Focused individual development
• Benefit package:
  • Health benefits
  • Retirement benefits
  • Paid time off
  • Flexible benefits
• Forums to explore beyond work passion (CSR, photography, painting, sports, etc.)