Security Analysis

Job Description:
Overview:

We are seeking two **hands-on Akamai WAF contractors** to support the WebSec team during a transition period. These roles will focus on **day-to-day WAF operations, incident response, and Akamai edge security management** across ecommerce and API platforms.

Recent incidents (including certificate lifecycle and edge behavior impacts to mobile apps) have reinforced the need for stronger operational ownership, visibility, and consistency across Akamai configurations and response processes.

Key Responsibilities:

* Operate and support **Akamai WAF (App & API Protector / Kona Site Defender)** in production environments
* Respond to and troubleshoot **security incidents** (WAF events, DDoS, bot traffic, API abuse, outages)
* Perform **WAF rule tuning, policy updates, and exception handling**
* Manage and support **Akamai configurations** (Property Manager, security policies, edge behaviors)
* Assist with **TLS/certificate-related issues** impacting edge delivery
* Support **change management** (standard and emergency changes)
* Develop and maintain **runbooks, playbooks, and operational documentation**
* Partner with internal teams, Akamai, and vendors to resolve production issues

MUST HAVE (Screen-Out Requirements):

Hands-on Akamai WAF experience (REQUIRED)

* Experience with **App & API Protector, Kona Site Defender, or similar Akamai WAF products**
* Proven experience supporting **production Akamai environments**
*

Strong understanding of:

* HTTP/S, APIs, and web application behavior
* WAF rule logic, tuning, and false positive handling
* Experience with **incident response and outage support**
* Ability to troubleshoot **edge-to-origin issues** and API connectivity

**Candidates without direct Akamai WAF experience should NOT be submitted.**

Preferred Qualifications:

* Experience with **Akamai Bot Manager, rate controls*** and DoS protections**
* Familiarity with **Akamai Property Manager and edge configuration**
* Experience with **certificate management (CPS, SBD, TLS debugging)**
* Background supporting **ecommerce or high-traffic API platforms**
* Experience building **runbooks and operational processes**

Key Objectives:

* Provide immediate **operational support for Akamai WAF and edge security**
* Improve **incident response consistency and speed**
* Strengthen **WAF tuning, change control, and configuration management**
* Reduce risk from **misconfigurations, certificate events, and reactive changes**
* Help formalize **repeatable processes and documentation**

Summary:

These roles are **Akamai-focused operational positions**, not general security roles. The contractors will act as hands-on extensions of the WebSec team**, directly supporting WAF operations, incident response, and edge security stability during a critical transition period.