Security Engineer, Web Application Security
- Compensation
- $106.6K–$146.5K / yr
- Location
- United States
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent education and/or professional experience.
- 2–4+ years of experience in cybersecurity, networking, infrastructure, cloud engineering, application support, or a related technical field.
- Foundational understanding of: HTTP/HTTPS TLS/SSL DNS TCP/IP Web applications REST APIs Reverse proxies and CDN concepts
- Familiarity with Web Application Firewall technologies or web application security concepts.
- Familiarity with common web security threats and the OWASP Top 10.
- Experience troubleshooting technical issues using logs and other diagnostic information.
- Ability to analyze technical problems and follow issues through resolution.
- Strong written and verbal communication skills.
- Ability and willingness to learn new security technologies and platforms.
Full description
Position Summary
We are seeking a Security Engineer to join Yum! Brands' Cybersecurity Engineering organization and help protect the web applications and APIs supporting our global digital ecosystem across KFC, Taco Bell, Pizza Hut, Habit Burger & Grill, and Yum! corporate platforms.
This role will support the operation and continuous improvement of Web Application Firewall (WAF), Content Delivery Network (CDN), API security, and digital certificate management services. The engineer will work with technologies such as Akamai App & API Protector, Akamai CDN, Certificate Manager, and other web security platforms to help protect internet-facing applications from cyber threats while maintaining application availability and performance.
The ideal candidate has a strong technical foundation in networking, web technologies, or cybersecurity and is interested in developing deeper expertise in web application security, CDN technologies, APIs, and certificate management.
This role will work closely with senior engineers and cross-functional teams to troubleshoot issues, onboard applications, respond to security events, implement security changes, maintain certificates, and improve operational processes.
Primary ResponsibilitiesWeb Application Security
- Configure, maintain, and support Web Application Firewall (WAF) protections using Akamai App & API Protector and related security technologies.
- Monitor and investigate web security events involving:
- OWASP Top 10 vulnerabilities
- API attacks
- Bot traffic
- Credential stuffing
- DDoS attacks
- Layer 7 attacks
- Other suspicious or malicious web traffic
- Assist with WAF policy tuning to reduce false positives while maintaining appropriate security protections.
- Review application traffic and security logs to identify attack patterns, application behavior, and potential security concerns.
- Implement approved WAF policy changes, exceptions, allowlists, and security configuration updates.
- Support senior engineers during complex security investigations and production incidents.
CDN & Edge Security
- Configure and maintain CDN and edge security configurations supporting internet-facing applications.
- Work with Akamai technologies including:
- Property Manager
- Edge Hostnames
- Cloudlets
- DNS integrations
- Origin connectivity
- Caching and delivery configurations
- Troubleshoot common CDN and web application issues involving:
- HTTP response codes
- Cache behavior
- DNS
- Routing
- Origin connectivity