Akamai WAF Security Engineer

Role: Akamai WAF Security Engineer

Location: NYC, NY

Primary Skill:  WAFs, API Security, AWS Application Migration

Job Description:

·       WAF Onboarding and Application Migration Lead onboarding internet-facing applications to Akamai WAF.? Work with applications, DNS, load balancer, proxy, firewall, and QA teams to migrate applications into monitor/alert mode and ultimately deny mode.

·       Coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.

·       WAF Policy Tuning and False Positive Analysis

·       Analyze production traffic and WAF events to identify false positives.

·       Tune security policies to reduce business impact while maintaining strong protection.

·       Review blocked requests, investigate application behavior, and create narrowly scoped exceptions , LLM, and API Security Support Troubleshoot AI- and LLM-related traffic that triggers WAF protections such as SQL injection controls work with application teams and vendors to design compensating controls, header-based attestation mechanisms, and API-specific protections.

·       Evaluate emerging Akamai AI security capabilities such as AI-powered detections, Firewall for AI, bot identification, and agentic AI protections.

·       Security Event Monitoring and Threat AnalysisReview WAF, Bot Manager, DDoS, Client Reputation, and API Security events.

·       Analyze attack patterns and determine whether activity is malicious or legitimate.

·       Recommend policy improvements and mitigations based on observed threats.

·       Quarterly Security Reviews and Platform Upgrades Conduct structured reviews of applications protected by Akamai.

·       Evaluate opportunities to move applications from monitoring to mitigation mode.

·       Perform quarterly WAF upgrades, policy reviews, and security-control tuning to keep protections aligned with current threat intelligence.

·       Incident Response and Troubleshooting Assist with production incidents where application behavior changes after WAF enablement.

·       Investigate latency issues, traffic-routing problems, load-balancer interactions, client IP handling, surgqueue events, and application outages.

·       Coordinate with Akamai engineering resources and internal teams to identify root causes and corrective actions

·       Security Architecture and Design Consulting Advise application teams on secure web architectures, OWASP protections, API security, bot mitigation client reputation controls, and DDoS protection.

·       Incident response experience

Preferred Experience

·       AI/LLM security Akamai Firewall for AI Enterprise-scale

·       migration experience

·       Financial services experience

·       Work Experience 7-10Years

Alchemy: Transforming Your Professional Vision into Reality

Since our inception in 2013, Alchemy has been dedicated to reshaping organizational performance through innovative IT services. With a vision to empower businesses seeking a transformative edge, we’ve positioned ourselves at the forefront of digitization and software modernization.

Our name reflects our mission: to transmute technology into gold-standard solutions for our esteemed clients. We proudly serve a diverse range of sectors, including IT and ITES, BFSI, Telecom and Media, Automotive, Manufacturing, Energy, Oil and Gas, Real Estate, Retail, Healthcare, and more.

With a global footprint spanning the USA, India, Europe, Canada, Singapore, Japan, and parts of Central and West Africa, we harness a unique blend of competencies, frameworks, and cutting-edge technologies. Together, we drive growth and innovation across industries, helping organizations turn their visions into reality.

Alchemy – Connecting Talent with Opportunities (Diversity, Equity and Inclusion)