CVS Health offers comprehensive support and resources to help you protect enterprise web applications and APIs while building security controls that strengthen the digital perimeter. This onsite role in Juneau, AK includes medical, dental, and vision coverage, paid time off, retirement savings options, and wellness programs, plus access to additional resources. Compensation includes a base pay range of USD 83,430 - 222,480 per year, with eligibility for a CVS Health bonus, commission, or short-term incentive program in addition to the base pay range listed above. Work is full time, with 40 anticipated weekly hours.
Responsibilities
As a Senior Security Engineer focused on Akamai and Edge Security Services, you will design, implement, administer, and optimize security controls that protect enterprise web applications, APIs, and internet-facing services. You will bring senior expertise to edge security technologies and partner across teams while participating in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes.
- Administer and optimize Akamai security technologies including WAF, Bot Manager Premier, Adaptive Security Engine, Client Reputation, Account Protector, DDoS protections, and related services.
- Administer Imperva Website Security capabilities, including security configuration, monitoring, data protection controls, and origin integrations.
- Design and maintain security controls for web applications, APIs, and other internet-facing services.
- Configure and tune managed and custom protections such as rate limiting, IP and geographic controls, ACLs, API protections, and custom security rules.
- Develop and maintain bot mitigation controls using behavioral analysis, bot scoring, allowlists, denylists, and automated enforcement.
- Investigate and mitigate threats including DDoS attacks, credential stuffing, account takeover attempts, scraping, and other application-layer threats.
- Analyze traffic, telemetry, and threat intelligence to improve protection while reducing false positives.
- Monitor Akamai security telemetry and platforms such as Splunk and Grafana for threats and anomalies.
- Investigate and resolve security incidents and complex platform issues, performing root cause analysis and implementing corrective actions.
- Provide technical escalation support for critical security events and production issues.
- Partner with application, cloud, infrastructure, networking, and security teams for onboarding, troubleshooting, and security improvements.
- Support integration of security controls into CI/CD and application delivery processes.
- Develop and maintain technical documentation, standards, runbooks, and operational procedures.
- Support security automation, audit, compliance, and risk-management initiatives.
Requirements
- 5+ years of experience in enterprise web application, API, or edge security.
- 3+ years hands-on experience with Akamai security technologies or comparable enterprise WAF and application-security platforms.
- 3+ years working knowledge of Web Application Firewalls (WAF), bot management and DDoS mitigation, Web and API security, HTTP/HTTPS and TCP/IP, DNS and traffic management, SSL/TLS and certificate management, OWASP Top 10, andor Linux-based environments.
- 2+ years experience analyzing security telemetry, identifying attack patterns, troubleshooting complex issues, and implementing effective countermeasures.
- Bachelor’s degree from an accredited college or university, or equivalent combination of education and relevant work experience.
Technologies
- Akamai
- Web Application Firewall (WAF)
- Bot Manager Premier
- Adaptive Security Engine
- Client Reputation
- Account Protector
- Imperva Website Security
- DDoS protections
- Splunk, Grafana
- HTTP/HTTPS, TCP/IP
- DNS
- SSL/TLS
- OWASP Top 10
- Linux-based environments
- CI/CD
