WAAP & API Security Expert - AKAMAI

Context

A leading global insurance group’s Cyber Defense division is building a new global product to protect its Cloud environment. To drive the evolution of this new product and its deployment, Cyber Defense is looking for an external service to handle the technical and migration aspects.

Missions

As a Web Application Protection (WAAP) and API expert, the service must:

• Have technical expertise in WAAP & API products in a major WAAP provider’s product
• Collaborate on Cloud environments (Azure / AWS)
• Review, validate, and challenge the security solution
• Follow the onboarding roadmap of the entities
• Review, validate, and improve security policies: DDoS L7, WAF, BOT, and API
• Raise service requests or incident tickets to vendor or provider
• Deliver incident reports related to DDoS and WAAP migration program
• Manage meetings with entities worldwide
• Analyze logs and data
• Create KPIs and security dashboards
• Collaborate with Cyber Defense teams on security requests and issues
• Collaborate with Architecture teams

Service Deliverables

• Product/service description
• High/low level design documents
• Documentation for onboarding process
• Documentation for roadmap onboarding
• Acceptance test documents and results
• Proof of concept/pilots and test results
• Project management documentation (planning, reporting, log register, action/issue log, budget actuals/forecast)

Required Expertise

• WAAP solution
• Cloud (AWS and Azure)
• English environment - mandatory
• WAP solution on premise & cloud
• WAF security mechanisms
• Expertise with a major WAAP provider’s solution

Service Qualifications

• Proven expertise in WAAP and API security
• Hands-on expertise with a major WAAP provider’s solutions
• Expertise in Cloud environments: AWS and Azure
• Fluency in English (mandatory)

1. Proven expertise in WAAP and API security
2. Hands-on expertise with AKAMAI solutions
3. Expertise in Cloud environments: AWS and Azure
4. Fluency in English (mandatory)
5. Knowledge of WAF Security mechanisms
6. Experience with WAP solution on premise & cloud