Cyber Security Engineer

Kforce has a client in need of a Cyber Security Engineer in Atlanta, GA. Responsibilities:

• Monitor and manage WAF and edge security ticket queues, resolving incidents and service requests with timely, clear communication
• Investigate and respond to Layer 7 security events, including bot activity, credential abuse, API attacks, injection attempts, and L7 DDoS, escalating when appropriate
• Provide on-call support for Sev 1 and Sev 2 incidents, partnering with SOC/IR, SRE, and application teams to support containment and recovery efforts
• Administer, configure, and continuously optimize Akamai and Cloudflare WAF/WAAP platforms, including custom and managed rules, rate limiting, geo/IP/ASN controls, mTLS, and header policies
• Manage bot mitigation strategies using scoring models, allowlists, challenges, and behavioral protections
• Deploy and maintain protections aligned to OWASP Top 10, API security, and business logic abuse, balancing security effectiveness with application performance and caching
• Implement platform changes using standard change management practices, including peer review, testing, phased rollouts, and rollback planning
• Oversee certificate lifecycle management and DNS/edge updates, leveraging policy-as-code approaches where feasible
• Integrate WAF and edge telemetry into SIEM platforms and maintain dashboards, alerts, runbooks, and SOPs to reduce false positives and incident recurrence
• Deliver platform health reporting with data-driven recommendations to improve resiliency and reduce operational risk
• Collaborate closely with SOC/IR and development teams to align security controls with application behavior and operational needs
• Contribute to internal documentation and continuous improvement initiatives to strengthen platform reliability and control effectiveness
• Stay current on emerging threats and vendor enhancements, proactively recommending configuration updates and control improvements
• Bachelor's degree in Computer Engineering or related field, or equivalent practical experience
• 3-6+ years of experience in enterprise network security operations
• Must have hands-on Akamai experience
• Proven expertise in WAF, web, and API protection policy tuning and incident response, including blocking vs. challenge strategies and false-positive reduction
• Strong understanding of TLS/PKI, DNS, CDN caching/edge routing, and performance tradeoffs
• Experience integrating WAF logs into SIEM platforms and building actionable dashboards and alerts
• Working knowledge of scripting and automation (e.g., Terraform, Bash, Python, Ansible, or PowerShell); comfortable with APIs, JSON/YAML, and regex
• Strong analytical troubleshooting, communication, and cross-functional collaboration skills
• Willingness to participate in a rotational on-call schedule