Ddos Mitigation

Ddos Mitigation Engineer Jobs

3 jobs found

2d ago

Senior Security Engineer – Akamai & Edge Security Services

CVS Health Atlanta, GA

Atlanta, GA

2d ago

$83k - $222k/yr Full time Senior Akamai Application Security

Apply Now

Job Description

CVS Health is seeking a Senior Security Engineer to design, implement, administer, and optimize edge security controls that protect enterprise web applications, APIs, and other internet-facing services. This onsite role in Atlanta, GA works closely with application, cloud, infrastructure, network, and security teams, and includes participation in a rotating on-call schedule to support critical incidents and emergency changes.

The position focuses on hands-on administration and continuous improvement of Akamai and Imperva security capabilities, along with investigation of application-layer threats. You will monitor telemetry, analyze traffic and threat intelligence, tune protections to reduce false positives, and provide technical escalation support when production issues arise.

Responsibilities

Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
Configure and tune managed and custom WAF protections, including rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
Monitor Akamai security telemetry using Splunk, Grafana, and related platforms for threats and anomalies.
Investigate and resolve security incidents and complex platform issues, including root cause analysis and implementation of corrective actions.
Provide technical escalation support for critical security events and production issues.
Partner with application, cloud, infrastructure, and networking teams on application onboarding, troubleshooting, and security improvements.
Support integration of security controls into CI/CD and application delivery processes.
Develop and maintain technical documentation, standards, runbooks, and operational procedures.
Support security automation, audit, compliance, and risk-management initiatives.

Requirements

5+ years of experience in enterprise web application, API, or edge security.
3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
3+ years working knowledge of WAF, bot management and DDoS mitigation, web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, and/or Linux-based environments.
2+ years analyzing security telemetry, identifying attack patterns, troubleshooting complex issues, and implementing countermeasures.

Monitoring & Incident Response

Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies.
Investigate and resolve security incidents and complex platform issues.
Perform root cause analysis and implement corrective actions.
Provide technical escalation support for critical security events and production issues.

Collaboration & Continuous Improvement

Partner with application, cloud, infrastructure, networking, and security teams on application onboarding, troubleshooting, and security improvements.
Support integration of security controls into CI/CD and application delivery processes.
Develop and maintain technical documentation, standards, runbooks, and operational procedures.
Support security automation, audit, compliance, and risk-management initiatives.

Technologies

Akamai
Web Application Firewall (WAF)
Bot Manager Premier
Adaptive Security Engine
Client Reputation
Account Protector
Imperva Website Security
DDoS protections
Splunk
Grafana
HTTP/HTTPS
TCP/IP
DNS
SSL/TLS
OWASP Top 10
Linux
CI/CD

Benefits

Medical, dental, and vision coverage
Paid time off
Retirement savings options
Wellness programs
Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families (based on eligibility)
Eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above

Education

Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience)

Job Details

Location: Atlanta, GA (onsite)
Salary: USD 83,430 - 222,480 per yearly
Anticipated weekly hours: 40
Time type: Full time
On-call / after-hours support: Rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes
Application window: Anticipated to close on 10/19/2026
Criminal records consideration: Qualified applicants with arrest or conviction records will be considered in accordance with federal, state, and local laws

View full job page →

2d ago

Senior Security Engineer – Akamai & Edge Security Services

CVS Health Juneau, AK

Juneau, AK

2d ago

$83k - $222k/yr Full time Senior Akamai Application Security

Apply Now

Job Description

Join CVS Health in Juneau, AK (onsite) to help secure enterprise web applications, APIs, and internet-facing services using leading edge security and application protection technologies. This role combines deep hands-on engineering with senior-level ownership, partnering across application, cloud, infrastructure, networking, and security teams while supporting a rotating on-call schedule. The position offers medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and additional resources, plus eligibility for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range listed.

What you’ll do

Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related edge security services.
Administer Imperva Website Security capabilities, covering security configuration, monitoring, data protection controls, and origin integrations.
Design and maintain security controls that protect web applications, APIs, and other internet-facing services.
Configure and tune managed and custom WAF protections, including rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
Investigate and mitigate application-layer threats such as DDoS attacks, credential stuffing, account takeover attempts, scraping, and related activity.
Use traffic analysis, telemetry, and threat intelligence to strengthen defenses while reducing false positives.
Monitor security telemetry and platforms including Splunk and Grafana to detect threats and anomalies.
Investigate and resolve security incidents and complex platform issues, performing root cause analysis and implementing corrective actions.
Provide technical escalation support for critical security events and production issues.
Partner with cross-functional teams on application onboarding, troubleshooting, and security improvements.
Support integration of security controls into CI/CD and application delivery processes.
Create and maintain technical documentation, standards, runbooks, and operational procedures.
Support security automation, audit, compliance, and risk-management initiatives.

What you bring

5+ years of experience in enterprise web application, API, or edge security.
3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
3+ years of working knowledge: Web Application Firewalls (WAF), bot management, and DDoS mitigation; web and API security; HTTP/HTTPS and TCP/IP; DNS and traffic management; SSL/TLS and certificate management; OWASP Top 10; and/or Linux-based environments.
2+ years of experience analyzing security telemetry, identifying attack patterns, troubleshooting complex issues, and implementing effective countermeasures.

Key technologies

Akamai
Web Application Firewall (WAF)
Bot Manager Premier
Adaptive Security Engine
Client Reputation
Account Protector
Imperva Website Security
DDoS protections
Splunk, Grafana
HTTP/HTTPS, TCP/IP, DNS
SSL/TLS, OWASP Top 10
Linux-based environments, CI/CD

Role details

Location: Juneau, AK (onsite)
Time type: Full time
Anticipated weekly hours: 40
On-call: rotating schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes
Base pay range: USD 83,430 - 222,480 per yearly

View full job page →

2mo ago

Cybersecurity Network Engineer

Seminole Hard Rock Support Services Davie, FL

Davie, FL

2mo ago Closed

Full time Application Security Azure Azure Networking

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Seminole Hard Rock Support Services provides a comprehensive benefits package designed to support health and well-being, planning for the future, and maintaining a healthy work-life balance. Benefits may vary with employment status. The Network Cybersecurity Engineer role is onsite in Davie, FL and focuses on building measurable, automated network security outcomes across on-premises and major cloud environments.

What you’ll do

Implement, operate, and continuously improve enterprise network security controls that defend traffic across on-premises and cloud, with Microsoft Azure as the primary platform (and additional coverage across AWS and Google Cloud). You will turn architecture and policy into defenses that can be deployed, tuned, instrumented, and validated with telemetry for detection, triage, and response.

Deploy, configure, and tune secure-access service edge controls including secure web gateway, cloud firewall, CASB, and DLP policy to keep coverage current
Operate zero-trust network access for workforce and third parties, moving away from legacy VPN patterns toward identity-aware, least-privilege application access
Administer an enterprise browser approach to enforce least-privilege, isolated access to sensitive applications from both managed and unmanaged endpoints
Tune SSL/TLS inspection, tenant restrictions, and egress policy, including traffic types sensitive to interception such as NTLM, Kerberos, and certificate-pinned traffic
Manage traffic steering, forwarding, and PAC configurations so users route to the correct control path from locations worldwide
Operate edge and perimeter defenses including WAF rules, DDoS mitigation, bot management, and CDN and DNS policy
Run and harden API security posture and runtime protection, discovering shadow APIs and closing authentication and data exposure gaps
Administer next-generation firewall policy, NAT, and rule lifecycle across data center and property perimeters to drive rule hygiene
Harden edge DNS, certificate, and TLS posture in partnership with PKI and infrastructure teams
Coordinate perimeter changes across franchise, property, and vendor networks so remote sites integrate securely without breaking authentication or application flows
Deploy and tune network detection and response, triaging anomalous east-west and north-south activity and producing high-fidelity findings for the SOC
Engineer network telemetry pipelines (flow data, DNS logs, proxy logs, firewall logs, packet metadata) to route, shape, and enrich data for cost-effective analysis
Develop and tune network-focused detections and SIEM content, mapping coverage to attacker techniques
Investigate network-layer incidents end-to-end with packet capture and log correlation, isolating root cause under time pressure
Maintain authoritative visibility of network assets and attack surface by reconciling what is connected against what is inventoried
Apply zero-trust segmentation and least-privilege access across campus, data center, gaming, and hospitality network estates
Design and enforce microsegmentation and network policy for sensitive zones (payment, gaming, surveillance, OT/IoT) with infrastructure and compliance teams
Implement cloud network security guardrails across Azure (primary), plus AWS and Google Cloud: virtual network design, firewalling, private connectivity, and logging baselines (including Azure Firewall, NSGs, Private Link)
Remediate cloud network misconfigurations and exposure paths surfaced by posture management to prevent drift
Integrate network security checks into infrastructure-as-code and deployment workflows so network changes are secure by default
Build network security automations, integrations, and response playbooks using APIs and SOAR
Leverage AI/ML and large language models to analyze network telemetry, accelerate alert triage and enrichment, surface anomalies, and automate reporting/documentation
Develop production-grade scripts, services, and tooling using Python, PowerShell, and Go to operationalize controls and reduce repetitive manual work
Automate firewall rule reviews, policy validation, and configuration compliance checks so drift is caught by pipelines
Instrument metrics and dashboards to measure network control coverage, detection efficacy, and remediation timeliness
Support Cybersecurity Strategy & Governance, audit, and privacy programs by automating evidence collection and continuous control monitoring for network controls
Document standards, runbooks, integration designs, and operating procedures for repeatable network control operations
Research, prototype, and pilot emerging network security tools and AI-driven capabilities to improve detection and automation
Participate in an on-call rotation and incident response for a 24/7 gaming and hospitality environment

What you bring

5–7+ years combined experience in network engineering, network security engineering, or cloud networking, with at least 4+ years hands-on network security engineering in enterprise environments
Deep network engineering expertise: routing and switching, firewalls, proxies, VPN/ZTNA, load balancing, DNS, TLS/PKI
Strong automation and software proficiency with hands-on experience in Python, PowerShell, Go, or similar languages; ability to build custom security tooling, integrations, and automation
Practical experience applying AI/ML or large language models to network data analysis, detection, triage, or automation
Working knowledge of SASE/SSE platforms including secure web gateway, ZTNA, CASB, and DLP; plus WAF and DDoS mitigation, NDR, and API security
Hands-on cloud network security experience on Microsoft Azure (required), and working experience in AWS and/or Google Cloud including virtual network design, cloud firewalls, private connectivity, and posture management
Solid fundamentals: TCP/IP, BGP/OSPF, DNS, DHCP, TLS/PKI, NAT, IPv6, packet analysis, segmentation, and zero-trust access models
Experience integrating network security tools and data sources via API, with familiarity in SOAR playbook development and SIEM content engineering
Familiarity with gaming and hospitality compliance frameworks (e.g., PCI-DSS, SOX, tribal gaming regulations, GLBA) is preferred but not required
Certifications preferred: Cisco CCNP Security, vendor certifications in next-gen firewalls and SASE/SSE, Microsoft AZ-700 or AZ-500, AWS Advanced Networking Specialty, GIAC (GCIA, GDSA, GCLD); CISSP is a plus

Security and automation capabilities you’ll use

Microsoft Azure (primary), AWS, Google Cloud; cloud network security components such as Azure Firewall, NSGs, and Private Link
SASE: SWG, ZTNA, CASB, DLP
Edge and application security: WAF, DDoS mitigation, bot management, CDN, DNS
API security and runtime protection
Visibility and detection: network detection and response using flow and packet analysis, plus SIEM and SOAR
PKI and TLS: SSL/TLS inspection, PKI, certificate lifecycle, and secrets management
Languages and tooling: Python, PowerShell, Go
Zero-trust and segmentation: microsegmentation and least-privilege access
AI/ML and large language models for telemetry analysis and automation

View full job page →

Ddos Mitigation Engineer Jobs

Senior Security Engineer – Akamai & Edge Security Services

Senior Security Engineer – Akamai & Edge Security Services

Cybersecurity Network Engineer

Get Ddos Mitigation Engineer Jobs alerts