Role: Akamai WAF Security Engineer
Location: NYC, NY
Primary Skill: WAFs, API Security, AWS Application Migration
Job Description:
· WAF Onboarding and Application Migration Lead onboarding internet-facing applications to Akamai WAF.? Work with applications, DNS, load balancer, proxy, firewall, and QA teams to migrate applications into monitor/alert mode and ultimately deny mode.
· Coordinate testing, rollout plans, traffic cutovers, validation, and rollback procedures.
· WAF Policy Tuning and False Positive Analysis
· Analyze production traffic and WAF events to identify false positives.
· Tune security policies to reduce business impact while maintaining strong protection.
· Review blocked requests, investigate application behavior, and create narrowly scoped exceptions , LLM, and API Security Support Troubleshoot AI- and LLM-related traffic that triggers WAF protections such as SQL injection controls work with application teams and vendors to design compensating controls, header-based attestation mechanisms, and API-specific protections.
· Evaluate emerging Akamai AI security capabilities such as AI-powered detections, Firewall for AI, bot identification, and agentic AI protections.
· Security Event Monitoring and Threat AnalysisReview WAF, Bot Manager, DDoS, Client Reputation, and API Security events.
· Analyze attack patterns and determine whether activity is malicious or legitimate.
· Recommend policy improvements and mitigations based on observed threats.
· Quarterly Security Reviews and Platform Upgrades Conduct structured reviews of applications protected by Akamai.
· Evaluate opportunities to move applications from monitoring to mitigation mode.
· Perform quarterly WAF upgrades, policy reviews, and security-control tuning to keep protections aligned with current threat intelligence.
· Incident Response and Troubleshooting Assist with production incidents where application behavior changes after WAF enablement.
· Investigate latency issues, traffic-routing problems, load-balancer interactions, client IP handling, surgqueue events, and application outages.
· Coordinate with Akamai engineering resources and internal teams to identify root causes and corrective actions
· Security Architecture and Design Consulting Advise application teams on secure web architectures, OWASP protections, API security, bot mitigation client reputation controls, and DDoS protection.
· Incident response experience
Preferred Experience
· AI/LLM security Akamai Firewall for AI Enterprise-scale
· migration experience
· Financial services experience
· Work Experience 7-10Years
Alchemy: Transforming Your Professional Vision into Reality
Since our inception in 2013, Alchemy has been dedicated to reshaping organizational performance through innovative IT services. With a vision to empower businesses seeking a transformative edge, we’ve positioned ourselves at the forefront of digitization and software modernization.
Our name reflects our mission: to transmute technology into gold-standard solutions for our esteemed clients. We proudly serve a diverse range of sectors, including IT and ITES, BFSI, Telecom and Media, Automotive, Manufacturing, Energy, Oil and Gas, Real Estate, Retail, Healthcare, and more.
With a global footprint spanning the USA, India, Europe, Canada, Singapore, Japan, and parts of Central and West Africa, we harness a unique blend of competencies, frameworks, and cutting-edge technologies. Together, we drive growth and innovation across industries, helping organizations turn their visions into reality.
Alchemy – Connecting Talent with Opportunities (Diversity, Equity and Inclusion)
