application security engineer for web applications

EPAM provides enterprise software products, open source solutions, and accelerators.

• Configure, tune, and maintain Web Application Firewall (WAF) rules and policies using Akamai;
• Participate in security incident handling, investigation, and resolution related to web application threats;
• Conduct reviews of WAF configurations, security policies, and web application security posture;
• Identify and analyze attack patterns, anomalies, and vulnerabilities targeting web applications;
• Provide day-to-day support to the security team by sharing web application security expertise and best practices;
• Support the integration of security processes across the broader team environment.

• 5+ Years of hands-on experience with Akamai, including WAF, Kona Site Defender, or similar Akamai security products;
• Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation, and bot management;
• Experience with WAF rule tuning, false positive management, and security incident response;
• Ability to work independently and integrate quickly into an existing team;
• Proficiency in English communication skills;
• Nice to have: experience with other WAF/CDN platforms such as Cloudflare, F5, and Imperva, familiarity with API security, security certifications such as CISSP, CEH, or GWAPT.

• No conditions specified