EPAM Systems

Senior Web Application Security Engineer

Location
Anywhere in the World
Region
Worldwide
Type
Full-time
Salary
Not listed
Posted
5 Nov 2026
Apply now
Apply now

Listed on We Work Remotely. You apply on the original posting; we never see your application.

Headquarters: Armenia, Belarus, Georgia URL: http://epam.com

We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.

Responsibilities

  • Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
  • Participate in security incident handling, investigation and resolution related to web application threats
  • Conduct reviews of WAF configurations, security policies and web application security posture
  • Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
  • Provide day-to-day support to the security team, sharing expertise and best practices in web app security
  • Support integration of security processes across the broader team environment

Requirements

  • 5+ years of hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
  • Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
  • Experience with WAF rule tuning, false positive management and security incident response
  • Capability to work independently and integrate quickly into an existing team
  • Proficiency in English communication skills

Nice to have

  • Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
  • Familiarity with API security
  • Security certifications (CISSP, CEH, GWAPT etc.)

To apply: https://weworkremotely.com/remote-jobs/epam-systems-senior-web-application-security-engineer