WAAP & API Security Expert - Freelance

Context

A leading global insurance group’s Cyber Defense division is building a new global product to protect its cloud environment. To drive the evolution of this new product and its deployment, Cyber Defense is seeking an external service provider to handle the technical and migration aspects.

Missions

As a Web Application Protection (WAAP) and API expert, the service provider must:

• Have technical expertise in WAAP & API products, specifically with the Akamai product
• Collaborate on cloud environments (Azure / AWS)
• Review, validate, and challenge the security solution
• Follow the onboarding roadmap of the entities
• Review, validate, and improve security policies: DDoS L7, WAF, BOT, and API
• Raise service requests or incident tickets to vendors or providers
• Deliver incident reports related to DDoS and WAAP migration programs
• Manage meetings with entities worldwide
• Analyze logs and data
• Create KPIs and security dashboards
• Collaborate with Cyber Defense teams on security requests and issues
• Collaborate with Architecture teams

Service Deliverables

• Product/service description
• High/low level design documents
• Documentation for onboarding process
• Documentation for roadmap onboarding
• Acceptance test documents and results
• Proof of concept/pilots and test results
• Project management documentation (planning, reporting, log register, action/issue log, budget actuals/forecast)

Required Expertise

• WAAP solution
• Cloud environments (AWS and Azure)
• English environment (mandatory)
• WAP solution on premise & cloud
• WAF security mechanisms
• Expertise with Akamai solution

Service Qualifications

• Proven expertise in WAAP and API security
• Hands-on expertise with Akamai solutions
• Expertise in cloud environments: AWS and Azure
• Fluency in English (mandatory)

1. Proven expertise in WAAP and API security
2. Hands-on expertise with AKAMAI solutions
3. Expertise in Cloud environments: AWS and Azure
4. Fluency in English (mandatory)
5. Knowledge of WAF Security mechanisms
6. Experience with WAP solution on premise & cloud