HonorVet Technologies. We're a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring. I came across your profile, and something stood out.
Job Title: Security Engineering Consultant – Akamai WAF/BotMan Specialist
Location: Remote
Duration: 6 month with possible extension
Must haves (3 skills required):
- (5+ years) managing Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) in large, complex enterprise environments, including rule sets, configuration management, reporting, and alerting capabilities.
- Hands-on experience responding to real-world web application security incidents and tuning Bot Manager policies to balance security effectiveness and application usability.
- Strong knowledge of web application security threats, especially OWASP Top 10 vulnerabilities, and mitigation strategies via WAF technologies.
- Familiarity with cloud network architectures, particularly AWS, and how WAF fits into hybrid/multi-cloud security postures.
Soft Skills
We are seeking an experienced Security Engineering Consultant with deep expertise in Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) to support a critical migration of applications and workloads to the AWS public cloud. This is a high-impact role requiring an individual who can enhance and optimize existing Akamai WAF and BMP policies and serve as a key responder during critical operational incidents and security events.
Responsibilities
- Lead the assessment, optimization, and continuous improvement of Akamai WAF policies to ensure robust protection against OWASP Top 10 and emerging web vulnerabilities.
- Collaborate closely with cloud, application, and security teams to align WAF/BMP configurations with evolving business and compliance requirements.
- Respond rapidly and effectively to critical security incidents, performing root cause analysis, mitigating ongoing threats, and implementing preventive measures.
- Manage day-to-day Akamai WAF operations including policy updates, tuning, false positive mitigation, and rule deployment.
- Conduct periodic reviews of WAF logs and alerts, generating actionable insights and recommendations.
- Assist with knowledge transfer and documentation related to WAF policies, incidents, and operational procedures.
- Provide expert guidance on integrating Akamai WAF protections within a hybrid cloud environment, focusing on security posture during the AWS migration.
- Ensure adherence to enterprise security standards, industry best practices, and regulatory requirements.
Required Qualifications
- Proven experience (5+ years) managing Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) in large, complex enterprise environments, including rule sets, configuration management, reporting, and alerting capabilities.
- Hands-on experience responding to real-world web application security incidents and tuning Bot Manager policies to balance security effectiveness and application usability.
- Strong knowledge of web application security threats, especially OWASP Top 10 vulnerabilities, and mitigation strategies via WAF technologies.
- Familiarity with cloud network architectures, particularly AWS, and how WAF fits into hybrid/multi-cloud security postures.
- Proficient in log analysis, SIEM integration, and security alert triage.
- Excellent communication skills, able to work collaboratively in cross-functional teams and produce clear technical documentation.
- Relevant certifications (e.g., GIAC Web Application Penetration Tester, Certified Cloud Security Professional (CCSP), Akamai Certified Professional) are a plus.
Preferred Qualifications
- Experience working in financial services or similarly regulated industries.
- Prior exposure to infrastructure-as-code tooling for WAF policy management is a bonus.
- Understanding of DevSecOps principles and security automation.