Edge Security Management: Design, provision, configure, and maintain Akamai security configurations, specifically focusing on App & API Protector, Akamai WAF, Bot Manager and Content Protector.
WAF & Rate Limiting Optimization: Continuously monitor and tune Web Application Firewall (WAF) rules and rate limiting policies to minimize false positives while maintaining a strict security posture against the OWASP Top 10.
DDoS & Botnet Mitigation: Identify, analyze, and mitigate real-time DDoS attacks and malicious automated bot traffic (e.g., credential stuffing, scraping) without disrupting legitimate user traffic or search engine crawlers.
API Security: Implement and manage security controls tailored for APIs, ensuring positive security models, schema validation, and discovery of unmanaged endpoints.
Cross-Functional Collaboration: Partner with application developers and product teams to translate business requirements into secure, scalable edge configurations and assist in troubleshooting application-layer issues.
Documentation & Automation: Produce clear, comprehensive technical documentation for edge configurations, incident playbooks, and operational procedures. Identify opportunities to leverage Akamai CLI, Terraform, or APIs to automate configuration management.
Platform Lifecycle: Manage the lifecycle of security services, including monitoring platform health, reviewing Akamai release updates, and implementing platform best practices.

Akamai Platform Expertise: Hands-on experience managing and configuring Akamai security solutions (App & API Protector, Bot Manager, Client-Side Protection, Edge DNS).
Web & API Security: Deep understanding of web application security principles, including the OWASP Top 10 and API Security Top 10.
Traffic Analysis: Proficiency in analyzing HTTP/S traffic, utilizing web logs, Akamai Control Center, or SIEM dashboards to investigate alerts and anomalies.
Network Protocols: Strong fundamental knowledge of core internet protocols, including TCP/IP, HTTP/HTTPS, and advanced DNS administration in enterprise environments.
Certificate Management: Solid understanding of TLS/SSL certificate lifecycles, renewals, and proper implementation at the edge layer.

Collective Bargaining Agreement: CCNL Terziario, Distribuzione e Servizi (Commercio)

Cyber Security Engineer

Key skills