Security Analyst III

HonorVet Technologies. We're a Service Disable Veteran-Owned IT staffing firm, ISO 9001, and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you are headed and only reach out when we genuinely believe there's a fit worth exploring. I came across your profile, and something stood out.

Job Title

Security Engineering Consultant – Akamai WAF/BotMan Specialist

Location

Remote

Duration

6 month with possible extension

Must haves (3 skills required)

(5+ years) managing Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) in large, complex enterprise environments, including rule sets, configuration management, reporting, and alerting capabilities.

Hands-on experience responding to real-world web application security incidents and tuning Bot Manager policies to balance security effectiveness and application usability.

Strong knowledge of web application security threats, especially OWASP Top 10 vulnerabilities, and mitigation strategies via WAF technologies.

Familiarity with cloud network architectures, particularly AWS, and how WAF fits into hybrid/multi-cloud security postures.

Soft Skills

We are seeking an experienced Security Engineering Consultant with deep expertise in Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) to support a critical migration of applications and workloads to the AWS public cloud. This is a high-impact role requiring an individual who can enhance and optimize existing Akamai WAF and BMP policies and serve as a key responder during critical operational incidents and security events.

Responsibilities

• Lead the assessment, optimization, and continuous improvement of Akamai WAF policies to ensure robust protection against OWASP Top 10 and emerging web vulnerabilities.
• Collaborate closely with cloud, application, and security teams to align WAF/BMP configurations with evolving business and compliance requirements.
• Respond rapidly and effectively to critical security incidents, performing root cause analysis, mitigating ongoing threats, and implementing preventive measures.
• Manage day-to-day Akamai WAF operations including policy updates, tuning, false positive mitigation, and rule deployment.
• Conduct periodic reviews of WAF logs and alerts, generating actionable insights and recommendations.
• Assist with knowledge transfer and documentation related to WAF policies, incidents, and operational procedures.
• Provide expert guidance on integrating Akamai WAF protections within a hybrid cloud environment, focusing on security posture during the AWS migration.
• Ensure adherence to enterprise security standards, industry best practices, and regulatory requirements.

Required Qualifications

• Proven experience (5+ years) managing Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) in large, complex enterprise environments, including rule sets, configuration management, reporting, and alerting capabilities.
• Hands-on experience responding to real-world web application security incidents and tuning Bot Manager policies to balance security effectiveness and application usability.
• Strong knowledge of web application security threats, especially OWASP Top 10 vulnerabilities, and mitigation strategies via WAF technologies.
• Familiarity with cloud network architectures, particularly AWS, and how WAF fits into hybrid/multi-cloud security postures.
• Proficient in log analysis, SIEM integration, and security alert triage.
• Excellent communication skills, able to work collaboratively in cross-functional teams and produce clear technical documentation.
• Relevant certifications (e.g., GIAC Web Application Penetration Tester, Certified Cloud Security Professional (CCSP), Akamai Certified Professional) are a plus.

Preferred Qualifications

• Experience working in financial services or similarly regulated industries.
• Prior exposure to infrastructure-as-code tooling for WAF policy management is a bonus.
• Understanding of DevSecOps principles and security automation.

If you are interested, feel free to reach out to me directly at [suraj.kumar@honorvet.com].