Senior Web Application Security Engineer

Headquarters: Armenia, Belarus, Georgia
URL: http://epam.com
We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.
Responsibilities
• Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
• Participate in security incident handling, investigation and resolution related to web application threats
• Conduct reviews of WAF configurations, security policies and web application security posture
• Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
• Provide day-to-day support to the security team, sharing expertise and best practices in web app security
• Support integration of security processes across the broader team environment
Requirements
• 5+ years of hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
• Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
• Experience with WAF rule tuning, false positive management and security incident response
• Capability to work independently and integrate quickly into an existing team
• Proficiency in English communication skills
Nice to have
• Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
• Familiarity with API security
• Security certifications (CISSP, CEH, GWAPT etc.)