Security Engineer w/ Akamai WAF

Security Engineer w/ Akamai WAF

Hybrid DFW Texas

General Job Description

The Web Application Security team collaborates with application owners, architects, and developers in order to integrate security tools such as web application firewalls and bot mitigation to protect American Airlines websites and mobile apps. This team also collaborates with corporate security fraud teams, privacy teams, and incident response teams in investigations related to websites. This individual is responsible for the analysis, design, implementation, and maintenance of the automation tasks for our product. This individual is also responsible for collaborating with application owners and security vendors to update/tune Web Application Firewall (WAF) and bot mitigation security policies.

Job Qualifications

Minimum Qualifications - Education & Prior Job Experience

• • Bachelors degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training

• • 3 years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing

Preferred Qualifications - Education & Prior Job Experience

• • Masters degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering or related technical discipline, or equivalent experience/training

• • 5+ years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing.

• • CISSP, CISM, CISA, GIAC or other security certifications are desired

• • Strong technical background with Akamai Web Application Firewall (WAF) and bot mitigation security policies

• • Experience working with Akamai performance and security tools

Skills, Licenses & Certifications

• • Solid comprehension of HTTP protocol and demonstrated ability to troubleshoot using HTTP logs and Splunk or other analytics tools

• • Strong technical background in web development and familiarity with potential attack vectors/methods

• • Strong technical background in scripting languages (Python, PowerShell, or JavaScript)

• • Basic understanding of DNS, Networks, Firewalls, SSL Certificates

• • Working understanding of Agile Framework

• • Self-motivated learning, good attitude

• Language & Communication Skills

• • Ability to effectively communicate both verbally and written with all levels within the organization

• • Ability to explain technical concepts and adjust messaging based on the audience, including non-technical groups

• • Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills

• • Ability to work well within a team environment, as well as independently