WAF Security Analyst

About the role

We are looking for hands‑on Akamai WAF contractors to join our WebSec team during a critical transition period. The role focuses on day‑to‑day WAF operations, incident response, and edge security management for high‑traffic ecommerce and API platforms.

Key responsibilities

• Operate and support Akamai WAF (App & API Protector / Kona Site Defender) in production.
• Respond to and troubleshoot security incidents such as WAF events, DDoS attacks, bot traffic, API abuse, and outages.
• Perform WAF rule tuning, policy updates, and manage exceptions.
• Maintain Akamai configurations via Property Manager, security policies, and edge behaviors.
• Assist with TLS/certificate issues that affect edge delivery.
• Support standard and emergency change management processes.
• Develop and keep runbooks, playbooks, and operational documentation up to date.
• Collaborate with internal teams, Akamai support, and third‑party vendors to resolve production problems.

Required profile

• Proven hands‑on experience with Akamai WAF products (App & API Protector, Kona Site Defender) in a production environment.
• Strong understanding of HTTP/S, APIs, and web application behavior.
• Experience in incident response, outage support, and troubleshooting edge‑to‑origin issues.
• Ability to manage TLS/certificate lifecycle and debug related problems.

Required skills

• Akamai WAF (App & API Protector, Kona Site Defender)
• Akamai Property Manager
• HTTP/S, APIs, web application traffic analysis
• WAF rule logic, tuning, false‑positive handling
• Incident response and DDoS/bot mitigation
• TLS/Certificate management (CPS, SBD, TLS debugging)