Senior Web Application Security Engineer

Headquarters: Armenia, Belarus, Georgia

URL: http://epam.com

We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.

Responsibilities

Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai

Participate in security incident handling, investigation and resolution related to web application threats

Conduct reviews of WAF configurations, security policies and web application security posture

Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications

Provide day-to-day support to the security team, sharing expertise and best practices in web app security

Support integration of security processes across the broader team environment

Requirements

5+ years of hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)

Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management

Experience with WAF rule tuning, false positive management and security incident response

Capability to work independently and integrate quickly into an existing team

Proficiency in English communication skills

Nice to have

Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva

Familiarity with API security

Security certifications (CISSP, CEH, GWAPT etc.)

To apply: https://weworkremotely.com/remote-jobs/epam-systems-senior-web-application-security-engineer