Security Engineer

We’re supporting a major organisation looking for a Cyber Security Engineer to join its growing security team.

You’ll play a key role in protecting customer facing applications, APIs and Internet facing services, taking ownership of web and API security controls while helping to strengthen the organisation’s overall security posture., * Manage and optimise Akamai WAAP configurations, WAF policies, security rules and exceptions.

• Tune controls to improve protection and reduce false positives.
• Identify vulnerabilities and drive remediation activities.
• Support the wider cyber security strategy and security improvement initiatives.
• Work closely with Security Engineering, SOC, Architecture and Infrastructure teams.
• Present security recommendations to technical and senior stakeholders.
• Support audit and compliance activities, including remediation of audit findings.
• Contribute to security projects from design through to implementation.

• Strong Cyber Security background with hands on security engineering experience.
• Proven experience administering Akamai WAAP.
• Strong knowledge of WAF policy tuning, API security controls and application onboarding.
• Good understanding of OWASP Top 10 and OWASP API Security Top 10.
• Knowledge of HTTP/S, REST APIs and application layer attack mitigation.
• Experience with vulnerability management, Qualys and attack surface monitoring tools.
• Understanding of patch management and vulnerability remediation.
• Strong stakeholder engagement and communication skills.