Application Security Consultant - Akamai & Cloudflare WAF

We’re looking for an experienced Application Security Consultant to strengthen application security across the software development lifecycle, cloud environments, and DevOps pipelines.

• 5+ years of hands-on experience with Cloudflare WAF, including policies, rulesets, firewall rules, bot management, DNS, DDoS protection, and Logpush. \n

• 4+ years of hands-on experience with Akamai WAF, including Kona Site Defender/Property Manager, Bot Manager, Edge DNS, and log staging and testing. \n

• 5+ years of experience with SAST, DAST, and SCA tools, such as Checkmarx, Burp Suite, Fortify, or equivalent platforms. \n

• Deep understanding of the OWASP Top 10, application security principles, and secure software development practices. \n

• Experience analyzing HTTP traffic, request headers, payloads, and common web application attack vectors. \n

• Strong understanding of application vulnerabilities, including XSS, SQL injection, RCE, CSRF, SSRF, and insecure deserialization. \n

• Experience supporting application security throughout the SDLC and DevOps processes. \n

• Familiarity with cloud platforms such as Microsoft Azure, AWS, and SaaS environments. \n

• Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR platforms, and cloud logs. \n

• Strong analytical, troubleshooting, and problem-solving skills. \n

• Ability to communicate technical security findings clearly and collaborate with developers, infrastructure teams, and cybersecurity stakeholders. \n

• Ability to work fully onsite in New York City for the duration of the engagement. \n

• Analyze HTTP traffic, investigate attacks, and address vulnerabilities such as XSS, SQL injection, and SSRF. \n

• Integrate application security tools into SDLC and DevOps pipelines. \n

• Analyze security logs and telemetry from WAFs, scanners, cloud platforms, and SIEM/SOAR tools. \n

• Collaborate with development and infrastructure teams to improve security practices and establish application security standards. \n

\n

\n