> Markdown version of [/jobs/ext/3824540-application-security-consultant-akamai-cloudflare-waf](https://www.wearedevelopers.com/jobs/ext/3824540-application-security-consultant-akamai-cloudflare-waf). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Consultant - Akamai & Cloudflare WAF

- **Company:** Visionaryz Inc.
- **Location:** Mundelein, IL, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Kona Site Defender, Amazon Web Services, Microsoft Azure, Burp Suite, Software as a Service, Cloud Computing, Cross-Site Request Forgery, DDoS Mitigation, DevOps, Domain Name System (DNS), Open Web Application Security, Systems Development Life Cycle, Fortify (Software), Akamai, Security Information and Event Management, Software Engineering, SQL Injection, Systems Integration, Web Applications, Cloud Platform System, Delivery Pipeline, Software Security, Cross-Site Scripting (XSS), Cloudflare, Checkmarx, Firewall Services Module, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 18, 2026
- **Apply:** https://www.thejobnetwork.com/job/3a6866a7-9231-4e17-b53b-5cac51f087b9/application-security-consultant-akamai-cloudflare-waf

## About the Role

* 5+ years of hands-on experience with Cloudflare WAF, including policies, rulesets, firewall rules, bot management, DNS, DDoS protection, and Logpush.
\n

 * 4+ years of hands-on experience with Akamai WAF, including Kona Site Defender/Property Manager, Bot Manager, Edge DNS, and log staging and testing.
\n

 * 5+ years of experience with SAST, DAST, and SCA tools, such as Checkmarx, Burp Suite, Fortify, or equivalent platforms.
\n

 * Deep understanding of the OWASP Top 10, application security principles, and secure software development practices.
\n

 * Experience analyzing HTTP traffic, request headers, payloads, and common web application attack vectors.
\n

 * Strong understanding of application vulnerabilities, including XSS, SQL injection, RCE, CSRF, SSRF, and insecure deserialization.
\n

 * Experience supporting application security throughout the SDLC and DevOps processes.
\n

 * Familiarity with cloud platforms such as Microsoft Azure, AWS, and SaaS environments.
\n

 * Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR platforms, and cloud logs.
\n

 * Strong analytical, troubleshooting, and problem-solving skills.
\n

 * Ability to communicate technical security findings clearly and collaborate with developers, infrastructure teams, and cybersecurity stakeholders.
\n

 * Ability to work fully onsite in New York City for the duration of the engagement.
\n

## Description

We're looking for an experienced Application Security Consultant to strengthen application security across the software development lifecycle, cloud environments, and DevOps pipelines.