Senior Security Engineer – Akamai & Edge Security Services

CVS Health is seeking a Senior Security Engineer to design, implement, administer, and optimize edge security controls that protect enterprise web applications, APIs, and other internet-facing services. This onsite role in Atlanta, GA works closely with application, cloud, infrastructure, network, and security teams, and includes participation in a rotating on-call schedule to support critical incidents and emergency changes.

The position focuses on hands-on administration and continuous improvement of Akamai and Imperva security capabilities, along with investigation of application-layer threats. You will monitor telemetry, analyze traffic and threat intelligence, tune protections to reduce false positives, and provide technical escalation support when production issues arise.

Responsibilities

• Administer and optimize Akamai security technologies, including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related security services.
• Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
• Design and maintain security controls protecting web applications, APIs, and other internet-facing services.
• Configure and tune managed and custom WAF protections, including rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
• Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
• Investigate and mitigate DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
• Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
• Monitor Akamai security telemetry using Splunk, Grafana, and related platforms for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues, including root cause analysis and implementation of corrective actions.
• Provide technical escalation support for critical security events and production issues.
• Partner with application, cloud, infrastructure, and networking teams on application onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Requirements

• 5+ years of experience in enterprise web application, API, or edge security.
• 3+ years of hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
• 3+ years working knowledge of WAF, bot management and DDoS mitigation, web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, and/or Linux-based environments.
• 2+ years analyzing security telemetry, identifying attack patterns, troubleshooting complex issues, and implementing countermeasures.

Monitoring & Incident Response

• Monitor Akamai security telemetry, Splunk, Grafana, and related platforms for threats and anomalies.
• Investigate and resolve security incidents and complex platform issues.
• Perform root cause analysis and implement corrective actions.
• Provide technical escalation support for critical security events and production issues.

Collaboration & Continuous Improvement

• Partner with application, cloud, infrastructure, networking, and security teams on application onboarding, troubleshooting, and security improvements.
• Support integration of security controls into CI/CD and application delivery processes.
• Develop and maintain technical documentation, standards, runbooks, and operational procedures.
• Support security automation, audit, compliance, and risk-management initiatives.

Technologies

• Akamai
• Web Application Firewall (WAF)
• Bot Manager Premier
• Adaptive Security Engine
• Client Reputation
• Account Protector
• Imperva Website Security
• DDoS protections
• Splunk
• Grafana
• HTTP/HTTPS
• TCP/IP
• DNS
• SSL/TLS
• OWASP Top 10
• Linux
• CI/CD

Benefits

• Medical, dental, and vision coverage
• Paid time off
• Retirement savings options
• Wellness programs
• Comprehensive benefits package designed to support the physical, emotional, and financial well-being of colleagues and their families (based on eligibility)
• Eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above

Education

• Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience (High School Diploma/GED plus 4 years of related experience)

Job Details

• Location: Atlanta, GA (onsite)
• Salary: USD 83,430 - 222,480 per yearly
• Anticipated weekly hours: 40
• Time type: Full time
• On-call / after-hours support: Rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes
• Application window: Anticipated to close on 10/19/2026
• Criminal records consideration: Qualified applicants with arrest or conviction records will be considered in accordance with federal, state, and local laws