Application Security Consultant/Network Engineer/CyberSecurity Engineer

Job Title:

Application Security Consultant/Network Engineer/CyberSecurity Engineer - Akamai & Cloudflare WAF Specialist

Contract (Hybrid - Onsite)

New York, NY (2 Broadway)

All Visas Accepted

Cloudflare WAF, Akamai WAF, Application Security, OWASP Top 10, SAST, DAST, SCA, Checkmarx, Burp Suite, Fortify, Bot Management, DDoS Mitigation, Edge DNS, Traffic Analysis, Cloud Security, SIEM, SOAR, DevSecOps, Vulnerability Assessment, Web Security

Role Overview: We are seeking a senior, hands-on Application Security Consultant to support product teams, infrastructure, and cybersecurity leadership for the Metropolitan Transportation Authority (MTA) in New York, NY.

In this role, you will strengthen application security across the SDLC and DevOps pipelines. Your primary focus will be onboarding, configuring, tuning, and monitoring protections across Akamai and Cloudflare WAF platforms to ensure consistent security coverage across high-value, cloud-hosted, and externally facing web applications.

Note: This position is based out of 2 Broadway, NYC on a hybrid schedule.

Key Responsibilities:

• WAF Management & Tuning: Configure, tune, and maintain Cloudflare (policies, rulesets, bot management, DNS, DDoS, logpush) and Akamai (KSD/Property Manager, Bot Manager, Edge DNS, log staging/testing) WAF platforms.

• AppSec & Vulnerability Management: Conduct SAST, DAST, and SCA security assessments across the SDLC using enterprise tools like Checkmarx, Fortify, Burp Suite, or equivalents.

• Traffic & Attack Analysis: Analyze traffic, headers, payloads, and attack vectors to mitigate threats like XSS, SQLi, RCE, Deserialization, CSRF, and SSRF.

• Developer Coaching & Architecture Reviews: Perform secure architecture reviews and coach software development teams on secure coding guidelines and OWASP Top 10 remediation.

• SIEM/SOAR & Telemetry Integration: Aggregate security telemetry from WAFs, vulnerability scanners, and cloud logs (AWS/Azure/SaaS) into SIEM/SOAR systems to build real-time threat dashboards and operational metrics.

Required Technical Skills & Experience:

• Cloudflare WAF: 5+ years of hands-on experience managing policies, rulesets, bot management, DDoS, and logpush.

• Akamai WAF: 4+ years of hands-on experience with Akamai KSD/Property Manager, Bot Manager, Edge DNS, and log testing.

• AppSec & OWASP: Deep understanding of OWASP Top 10 vulnerabilities, secure SDLC principles, and modern secure coding practices.

• Scanning & Testing Tools: 5+ years of experience with SAST, DAST, and SCA tools (Checkmarx, Burp Suite, Fortify, or similar).

• Traffic & Payload Analysis: Proven ability to dissect traffic, inspect payloads, and neutralize web application attack vectors.

• Cloud & Telemetry: Experience with AWS/Azure environments, SIEM/SOAR integrations, and security log management.

Interested candidates can apply directly via Dice or email an updated resume to View email address on us.fitly.work .