Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Network Security Operations
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary: The Akamai WAF Engineer is responsible for designing, deploying, monitoring, and optimizing Akamai Web Application Firewall (Kona Site Defender / App & API Protector) solutions to protect web applications from cyber threats such as OWASP Top 10 attacks, DDoS, bot attacks, and API abuse. The role works closely with application, network, and SOC teams to ensure high availability, performance, and security of internet-facing applications. Roles & Responsibilities: - Expected to perform independently and become an SME. - Required active participation/contribution in team discussions. - Contribute in providing solutions to work related problems. - Engage in continuous learning to stay updated with the latest security trends and technologies. - Collaborate with cross-functional teams to ensure security measures are integrated into all aspects of cloud operations. Akamai WAF Management - Configure, deploy, and maintain Akamai WAF policies using: Kona Site Defender, App & API Protector - Tune WAF rules to reduce false positives while maintaining strong security posture - Implement custom rules, rate controls, and match targets Security Monitoring & Incident Response - Monitor Akamai security events, alerts, and logs - Investigate and respond to web-based attacks (SQLi, XSS, CSRF, L7 DDoS, bot attacks) - Support incident response activities and root cause analysis - Policy Optimization & Change Management - Perform policy tuning based on traffic behavior and Support onboarding of new applications to Akamai - Execute change requests with proper testing and rollback plans Threat Mitigation - Implement mitigations for: - OWASP Top 10 vulnerabilities - Zero-day threats - Bot and scraper attacks - Integrate Akamai WAF with SIEM/SOC tools (Splunk, Sentinel, QRadar, etc.) Collaboration & Documentation - Work closely with application teams, DevOps, and network teams - Create and maintain runbooks, SOPs, and security documentation - Provide guidance on secure application delivery through Akamai Professional & Technical Skills: - Must To Have Skills: Proficiency in Network Security Operations. - Strong understanding of cloud security principles and best practices. - Experience with security frameworks such as NIST, ISO 27001, or CIS. - Familiarity with security tools and technologies for threat detection and response. - Knowledge of compliance regulations and standards relevant to cloud security. - Strong hands-on experience with Akamai WAF - Understanding HTTP/HTTPS, TCP/IP, DNS, CDN concepts, OWASP Top 10 - Experience in WAF rule tuning and false positive management - Familiarity with DDoS mitigation concepts - Working knowledge of API security Security & Tools - Log analysis and traffic inspection - SIEM integration and alert correlation - Knowledge of SSL/TLS and certificate management - Firewall management - Proxy management - Cloud Security Operating Systems & Scripting - Basic Linux/Unix knowledge - Scripting experience (Python, Bash) – preferred Preferred Certifications - Akamai Certified Security Professional - CEH / Security+ - CISSP (for senior roles) Additional Information: - The candidate should have minimum 3 years of experience in Network Security Operations. - This position is based at our Bangalore office. - A 15 years full time education is required.