About the role
Headquarters: Armenia, Belarus, Georgia
URL: http://epam.com
We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.
Responsibilities
Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
Participate in security incident handling, investigation and resolution related to web application threats
Conduct reviews of WAF configurations, security policies and web application security posture
Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
Provide day-to-day support to the security team, sharing expertise and best practices in web app security
Support integration of security processes across the broader team environment
Requirements
5+ years of hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
Experience with WAF rule tuning, false positive management and security incident response
Capability to work independently and integrate quickly into an existing team
Proficiency in English communication skills
Nice to have
Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
Familiarity with API security
Security certifications (CISSP, CEH, GWAPT etc.)
To apply: https://weworkremotely.com/remote-jobs/epam-systems-senior-web-application-security-engineer