Senior Security Engineer – Akamai & Edge Security Services

Join CVS Health in Juneau, AK (onsite) to help secure enterprise web applications, APIs, and internet-facing services using leading edge security and application protection technologies. This role combines deep hands-on engineering with senior-level ownership, partnering across application, cloud, infrastructure, networking, and security teams while supporting a rotating on-call schedule. The position offers medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and additional resources, plus eligibility for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range listed.

What you’ll do

• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related edge security services.
• Administer Imperva Website Security capabilities, covering security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls that protect web applications, APIs, and other internet-facing services.
• Configure and tune managed and custom WAF protections, including rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate application-layer threats such as DDoS attacks, credential stuffing, account takeover attempts, scraping, and related activity.
• Use traffic analysis, telemetry, and threat intelligence to strengthen defenses while reducing false positives.
• Monitor security telemetry and platforms including Splunk and Grafana to detect threats and anomalies.
• Investigate and resolve security incidents and complex platform issues, performing root cause analysis and implementing corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Partner with cross-functional teams on application onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Create and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

What you bring

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years of working knowledge: Web Application Firewalls (WAF), bot management, and DDoS mitigation; web and API security; HTTP/HTTPS and TCP/IP; DNS and traffic management; SSL/TLS and certificate management; OWASP Top 10; and/or Linux-based environments.
• 2+ years of experience analyzing security telemetry, identifying attack patterns, troubleshooting complex issues, and implementing effective countermeasures.

Key technologies

• Akamai
• Web Application Firewall (WAF)
• Bot Manager Premier
• Adaptive Security Engine
• Client Reputation
• Account Protector
• Imperva Website Security
• DDoS protections
• Splunk, Grafana
• HTTP/HTTPS, TCP/IP, DNS
• SSL/TLS, OWASP Top 10
• Linux-based environments, CI/CD

Role details

• Location: Juneau, AK (onsite)
• Time type: Full time
• Anticipated weekly hours: 40
• On-call: rotating schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes
• Base pay range: USD 83,430 - 222,480 per yearly