Security Engineer

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Security Engineer II

• Security research including development of tools for vulnerability analysis and mitigation
• Development of static and run-time analysis tools to figure out root cause and input conditions related to a vulnerability
• Vulnerability triage and proof of concept exploit development to support the creation of detection content
• Write detailed technical reports, summaries, and testing methodologies
• Research emerging technologies, protocols, and testing methodologies
• Develop proof of concept exploits for testing vulnerability mitigations
• Perform patch analysis to find and trigger vulnerabilities
• Reverse engineer binary applications, protocols, and formats
• Analyze vulnerabilities and emerging security threats and technologies
• Provide critical security focused expertise to engineering organizations

Security Research Engineer

• Support the design, implementation, and operation of security controls across endpoints, networks, cloud, and identity
• Partner closely with Security Operations, Infrastructure, and Application teams to reduce risk, respond to threats, and improve security posture
• Help define, implement, and maintain secure Azure configurations and guardrails
• Support cloud security posture management (CSPM) improvements by reviewing findings, validating risk, and partnering with engineering teams on remediation
• Assist in managing Azure Web Application Firewall (WAF) policies, including rule tuning, exception handling, and change coordination
• Support Azure Front Door configurations and security controls, including routing rules, TLS/certificate considerations, and integration with WAF policies
• Monitor and investigate cloud security alerts and signals
• Contribute to vulnerability management in cloud workloads by helping prioritize fixes
• Work with application and platform teams to enable secure deployment patterns
• Assist with incident response activities involving cloud services by gathering evidence
• Maintain clear documentation for cloud security configurations, standards, and operating procedures
• Assist with security assessments for third parties and new technologies.

Associate Cloud Security Engineer

• Own and operate application security tooling, including SAST, DAST, and software composition analysis, ensuring tools are tuned, effective, and aligned to business risk
• Embed application security into CI/CD pipelines and development workflows to support shift‑left security while minimizing developer friction
• Perform secure code reviews and validate vulnerabilities for exploitability, impact, and remediation feasibility
• Define and maintain secure coding standards, guidance, and reusable security patterns for development teams
• Establish guardrails and review expectations for AI‑assisted and AI‑generated code, reducing unowned and unmanaged application risk
• Partner with development teams to triage findings, reduce false positives, and drive effective remediation
• Apply risk‑based decision making aligned to organizational risk appetite and compliance frameworks (NIST, HIPAA, SOC 2)
• Support application threat modeling and identification of architectural security gaps
• Collaborate with cloud, platform, and identity teams to ensure applications integrate securely with enterprise services
• Contribute to audit readiness, evidence collection, and regulatory support related to application security controls
• Reduce single‑points‑of‑failure by documenting processes, mentoring others, and improving program resiliency

Senior Applications Security Engineer

• design and develop control plane software for security features used in smart switching platforms and distributed firewall systems
• contribute to core feature development from design through implementation, with a focus on APIs, policy orchestration, and secure service integration
• work closely with engineers across control plane, data plane, and platform teams to deliver scalable capabilities that support deployment, observability, and policy enforcement across distributed environments
• build and maintain APIs used for policy configuration, deployment workflows, logging, and operational visibility
• integrate third-party components and internal services into Cisco security platforms
• contribute to architecture discussions, feature design, and technical execution for new security capabilities

Security Engineering Technical Leader – Control Plane, Hypershield

• Team Leadership & Development: Mentoring, and growing security engineers. This includes running 1:1s, career development planning, performance reviews, and building a culture of continuous learning around evolving threats and technologies.
• Security Execution: Partnering with engineers on your team and the Sr. Director of Security and Integrity you’ll define and prioritize the team's quarterly and annual security initiatives, aligning them with business objectives and frameworks like NIST CSF, CIS Controls, or SOC 2. Translating risk assessments into actionable engineering work.
• Cross-Functional Collaboration: Partnering with Platform, SRE, Legal, IT, Compliance, and Product teams to embed security into the SDLC, incident response processes, and vendor management workflows.
• Incident Response & Preparedness: You’ll help the team to maintain the Security incident response program: runbooks, running tabletop exercises, on call schedules, and ensuring timely response to alerts and events.
• Product and Cloud Security: Drive product security practices and cloud security posture across our AWS infrastructure, ensuring secure architecture, configuration, and continuous monitoring of our production environments.
• Vulnerability & Risk Management: Overseeing application security testing (SAST, DAST, SCA), penetration testing programs (including bug bounty), and ensuring vulnerabilities are triaged, prioritized, and remediated within SLA.
• Corporate Security: Partnering with IT, you and the team will help ensure strong protections in corporate security including spam, EDR, and device security is mature and well executed.
• Vendor & Third-Party Risk: Helping the team evaluating security vendors, and overseeing third-party risk assessments.
• Budget & Resource Planning: In coordination with the other department managers; manage the security budget, justifying tooling spend, headcount requests.

See all jobs on JobTailor