Live opening · Posted 8 hours ago
The key details from the original listing.
Live timing from JobBeeper.
Description supplied by the original job listing.
Key Skills: Akamai, Web Application Firewall (WAF), DevSecOps
Roles and Responsibilities:
Act as a high-level specialist who independently drives bot detection and mitigation initiatives and escalates to management as the next step.
Analyze ecommerce fraud attack patterns and support mitigation strategies for credential stuffing/ATO, carding, scraping, scalping/inventory denial, and promo/gift card abuse.
Master telemetry and logging correlation across WAF/CDN logs and application logs to support investigations, detection improvements, and operational dashboards.
Build and refine detection logic using feature engineering and traffic baselining (normal vs anomaly) to improve coverage while reducing false positives.
Develop and maintain golden signals such as login failure rate, unique IPs per account, new device rate, checkout abandonment spikes, and 4xx/5xx patterns.
Apply deep understanding of HTTP and client behavior to interpret headers, cookies, caching, redirects, and TLS-related signals for bot identification and mitigation.
Engineer and tune edge/WAF/CDN rules and bot policies, including rate limiting strategies (global, per IP, per session, per account, per ASN) and challenge flows (JS challenge, CAPTCHA, proof-of-work style concepts).
Own allowlist/denylist governance, including how allowlists can be abused, and ensure safe operational controls.
Drive release discipline for mitigations using staged deployment (monitor alert soft block hard block) and validate impact through monitoring and alerting.
Support staged mitigation experiments (A/B testing) to protect conversion while improving security outcomes.
Collaborate closely with application teams, fraud, SRE, and security operations to continuously tune detection logic as attacker techniques evolve.
Skills Required:
Strong expertise in Akamai security solutions and WAF configurations
Deep understanding of bot detection, fraud patterns, and application security
Experience analyzing WAF/CDN and application logs for threat detection
Knowledge of HTTP protocol, client behavior, cookies, headers, and TLS signals
Hands-on experience designing and tuning rate limiting and bot mitigation rules
Familiarity with DevSecOps practices (CI/CD security integration)
Experience in anomaly detection, traffic baselining, and feature engineering
Strong understanding of ecommerce fraud scenarios (ATO, scraping, carding, etc.)
Experience in staged rollout strategies (monitoring - blocking) and A/B testing for security controls
Ability to collaborate with cross-functional teams (SRE, fraud, app, security ops)
Education: Bachelor's Degree in related field
Work arrangement
No
Recently tracked roles with full details and direct application links.