Application Security Consultant - Akamai & Cloudflare WAF

We’re looking for an experienced Application Security Consultant to strengthen application security across the software development lifecycle, cloud environments, and DevOps pipelines.

Key Responsibilities

• Conduct application security assessments and secure architecture reviews.
• Configure, tune, and monitor Akamai and Cloudflare WAF protections.
• Manage WAF rules, bot protection, DNS, and DDoS mitigation.
• Operate SAST/DAST/SCA tools and coordinate vulnerability remediation.
• Analyze traffic, investigate attacks, and address vulnerabilities such as XSS, SQL injection, and SSRF.
• Integrate application security tools into SDLC and DevOps pipelines.
• Analyze security logs and telemetry from WAFs, scanners, cloud platforms, and SIEM/SOAR tools.
• Collaborate with development and infrastructure teams to improve security practices and establish application security standards.

Required Qualifications

• 5+ years of hands-on experience with Cloudflare WAF , including policies, rulesets, firewall rules, bot management, DNS, DDoS protection, and Logpush.
• 4+ years of hands-on experience with Akamai WAF , including Kona Site Defender/Property Manager, Bot Manager, Edge DNS, and log staging and testing.
• 5+ years of experience with SAST, DAST, and SCA tools , such as Checkmarx, Burp Suite, Fortify, or equivalent platforms.
• Deep understanding of the OWASP Top 10 , application security principles, and secure software development practices.
• Experience analyzing traffic, request headers, payloads, and common web application attack vectors.
• Strong understanding of application vulnerabilities, including XSS, SQL injection, RCE, CSRF, SSRF, and insecure deserialization.
• Experience supporting application security throughout the SDLC and DevOps processes.
• Familiarity with cloud platforms such as Microsoft Azure, AWS, and SaaS environments .
• Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR platforms, and cloud logs.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to communicate technical security findings clearly and collaborate with developers, infrastructure teams, and cybersecurity stakeholders.
• Ability to work fully onsite in New York City for the duration of the engagement.