Akamai Security Analyst

Job Title: Akamai WAF Engineer / Akamai Web Security EngineerLocation: Colombia - RemoteDuration: 12 months
Overview:We are seeking two experienced, hands-on Akamai WAF Engineers to join the Web Security (WebSec) team on a contract basis during a critical transition period. These roles are focused on day-to-day Akamai Web Application Firewall (WAF) operations, incident response, and edge security management across high-traffic eCommerce and API platforms.Recent production incidents involving certificate lifecycle management and Akamai edge behaviour have highlighted the need for stronger operational ownership, improved visibility, and consistent configuration management. As a key extension of the WebSec team, you will be responsible for maintaining the stability, security, and performance of Akamai-managed applications and APIs.
Note: This is a dedicated Akamai-focused operational role, not a general Cyber Security or Application Security position.
Key Responsibilities:Administer and support Akamai WAF solutions, including App & API Protector (AAP) and Kona Site Defender (KSD) in production environments.Monitor, investigate, and respond to security incidents, including WAF events, DDoS attacks, bot traffic, API abuse, and production outages.Perform WAF policy tuning, rule optimisation, false-positive analysis, and exception management.Configure and maintain Akamai Property Manager, security policies, edge behaviours, and related configurations.Troubleshoot edge-to-origin connectivity, application delivery, and API communication issues.Support TLS/SSL certificate lifecycle management, certificate renewals, and edge delivery troubleshooting.Execute standard and emergency production changes following established change management processes.Develop and maintain operational documentation, including runbooks, playbooks, and standard operating procedures (SOPs).Collaborate with internal engineering teams, Akamai support, vendors, and business stakeholders to resolve production issues.Participate in production support and operational readiness activities to ensure platform availability and security.
Required Qualifications:Mandatory (Screen-Out Criteria)Candidates must have direct, hands-on experience with Akamai WAF. Profiles without production Akamai WAF experience will not be considered.
Technical Skills:Hands-on experience administering Akamai App & API Protector (AAP) and/or Kona Site Defender (KSD).Proven experience supporting production Akamai environments.Strong understanding of:HTTP/HTTPS protocolsREST APIs and web application architectureWeb Application Firewall concepts and rule logicWAF policy tuning and false-positive mitigationExperience responding to production incidents and security events.Ability to troubleshoot:Edge-to-origin communicationAPI connectivity issuesApplication delivery problemsExperience managing:Akamai Property ManagerEdge configurationsSecurity policiesStrong analytical and troubleshooting skills.
Preferred Qualifications:Experience with Akamai Bot Manager.Knowledge of Rate Controls and DoS/DDoS protection.Experience with:Akamai Property ManagerEdge configuration managementEdge security optimisationExperience managing:TLS/SSL certificatesCertificate Provisioning System (CPS)Secure by Default (SBD)TLS debuggingExperience supporting high-volume eCommerce or API-driven environments.Experience creating operational documentation, runbooks, and incident response playbooks.Familiarity with production change management processes.