> Markdown version of [/jobs/ext/4026287-security-analyst-iii](https://www.wearedevelopers.com/jobs/ext/4026287-security-analyst-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst III

- **Company:** The Fountain Group
- **Location:** Jamestown, MI, United States (Remote available)
- **Experience:** Expert
- **Salary:** $197,600.0 - $228,800.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Application Firewall, Cloud Computing Security, Configuration Management, Log Analysis, Open Web Application Security, Akamai, Web Application Security, Security Information and Event Management, Web Applications, Multi-Cloud, HybridCloud, Devsecops, Security Orchestration, Automation & Response
- **Published:** October 30, 2026
- **Apply:** https://www.thefountaingroup.com/job/18524/security_analyst_iii#apply-now-header

## About the Role

* Must haves: (5+ years) managing Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) in large, complex enterprise environments, including rule sets, configuration management, reporting, and alerting capabilities.
 * Hands-on experience responding to real-world web application security incidents and tuning Bot Manager policies to balance security effectiveness and application usability.
 * Strong knowledge of web application security threats, especially OWASP Top 10 vulnerabilities, and mitigation strategies via WAF technologies.
 * Familiarity with cloud network architectures, particularly AWS, and how WAF fits into hybrid/multi-cloud security postures., * Proven experience (5+ years) managing Akamai Web Application Firewall (WAF) and Bot Manager Premier (BMP) in large, complex enterprise environments, including rule sets, configuration management, reporting, and alerting capabilities.
 * Hands-on experience responding to real-world web application security incidents and tuning Bot Manager policies to balance security effectiveness and application usability.
 * Strong knowledge of web application security threats, especially OWASP Top 10 vulnerabilities, and mitigation strategies via WAF technologies.
 * Familiarity with cloud network architectures, particularly AWS, and how WAF fits into hybrid/multi-cloud security postures.
 * Proficient in log analysis, SIEM integration, and security alert triage.
 * Excellent communication skills, able to work collaboratively in cross-functional teams and produce clear technical documentation., * Relevant certifications (e.g., GIAC Web Application Penetration Tester, Certified Cloud Security Professional (CCSP), Akamai Certified Professional) are a plus.
 * Experience working in financial services or similarly regulated industries.
 * Prior exposure to infrastructure-as-code tooling for WAF policy management is a bonus.
 * Understanding of DevSecOps principles and security automation.

## Description

* Lead the assessment, optimization, and continuous improvement of Akamai WAF policies to ensure robust protection against OWASP Top 10 and emerging web vulnerabilities.
 * Collaborate closely with cloud, application, and security teams to align WAF/BMP configurations with evolving business and compliance requirements.
 * Respond rapidly and effectively to critical security incidents, performing root cause analysis, mitigating ongoing threats, and implementing preventive measures.
 * Manage day-to-day Akamai WAF operations including policy updates, tuning, false positive mitigation, and rule deployment.
 * Conduct periodic reviews of WAF logs and alerts, generating actionable insights and recommendations.
 * Assist with knowledge transfer and documentation related to WAF policies, incidents, and operational procedures.
 * Provide expert guidance on integrating Akamai WAF protections within a hybrid cloud environment, focusing on security posture during the AWS migration.
 * Ensure adherence to enterprise security standards, industry best practices, and regulatory requirements.