Application Security Consultant - Akamai & Cloudflare WAF

We’re looking for an experienced Application Security Consultant to strengthen application security across the software development lifecycle, cloud environments, and DevOps pipelines. Key Responsibilities Conduct application security assessments and secure architecture reviews. Configure, tune, and monitor Akamai and Cloudflare WAF protections. Manage WAF rules, bot protection, DNS, and DDoS mitigation. Operate SAST/DAST/SCA tools and coordinate vulnerability remediation. Analyze traffic, investigate attacks, and address vulnerabilities such as XSS, SQL injection, and SSRF. Integrate application security tools into SDLC and DevOps pipelines. Analyze security logs and telemetry from WAFs, scanners, cloud platforms, and SIEM/SOAR tools. Collaborate with development and infrastructure teams to improve security practices and establish application security standards. Required Qualifications 5+ years of hands-on experience with Cloudflare WAF , including policies, rulesets, firewall rules, bot management, DNS, DDoS protection, and Logpush. 4+ years of hands-on experience with Akamai WAF , including Kona Site Defender/Property Manager, Bot Manager, Edge DNS, and log staging and testing. 5+ years of experience with SAST, DAST, and SCA tools , such as Checkmarx, Burp Suite, Fortify, or equivalent platforms. Deep understanding of the OWASP Top 10 , application security principles, and secure software development practices. Experience analyzing traffic, request headers, payloads, and common web application attack vectors. Strong understanding of application vulnerabilities, including XSS, SQL injection, RCE, CSRF, SSRF, and insecure deserialization. Experience supporting application security throughout the SDLC and DevOps processes. Familiarity with cloud platforms such as Microsoft Azure, AWS, and SaaS environments . Experience integrating or consuming security telemetry from WAFs, scanners, SIEM/SOAR platforms, and cloud logs. Strong analytical, troubleshooting, and problem-solving skills. Ability to communicate technical security findings clearly and collaborate with developers, infrastructure teams, and cybersecurity stakeholders. Ability to work fully onsite in New York City for the duration of the engagement.