Web Security Engineer (Akamai)
Sanderson Recruitment · Fenchurch St, Central London ·
- Category
- Security
- Salary
- GBP 100,100 – 109,200 / year
Contract security engineer role protecting customer-facing web applications and APIs: managing and tuning Akamai WAAP (WAF policies, API security, bot protection), reducing false positives, and driving vulnerability remediation with Qualys. Hired via Sanderson Recruitment for a major organisation, based in Central London.
Salary: £100,100 - 109,200 per year
Requirements:- Strong cyber security background with hands-on security engineering experience
- Proven experience administering Akamai WAAP, including WAF, API security and bot protection capabilities
- Hands-on experience with WAF policy design, rule tuning, exception management and application onboarding
- Good understanding of the OWASP Top 10 and OWASP API Security Top 10
- Knowledge of HTTP/S, REST APIs and application-layer attack mitigation
- Experience with vulnerability management, Qualys and attack surface monitoring tools
- Understanding of patch management and vulnerability remediation
- Strong stakeholder engagement and communication skills
- Manage and optimise Akamai WAAP configurations, WAF policies, security rules and exceptions
- Administer, maintain and enhance WAF controls to protect customer-facing web applications and APIs
- Tune security controls to improve protection and reduce false positives
- Identify vulnerabilities and drive remediation activities
- Support our wider cyber security strategy and security improvement initiatives
- Work with our Security Engineering, SOC, Architecture and Infrastructure teams
- Present security recommendations to technical and senior stakeholders
- Support audit and compliance activities, including remediation of audit findings
- Contribute to security projects from design through implementation
- API
- HTTP
- Support
- OWASP
- REST
- Security
- WAF
- Web
- Firewall
More:
We are supporting a major organisation with its search for a Cyber Security Engineer to join its growing security team. The role focuses on protecting customer-facing applications, APIs and internet-facing services while strengthening the organisations overall security posture. The initial contract is six months, with a rate of £500–£600 inside IR35. The role is based in Surrey, with on-site work twice a week. Respect and equality are core values to us. We welcome applicants from all backgrounds and perspectives, and can support reasonable adjustments during the recruitment process.
last updated 39 week of 2026