Cybersecurity Engineer II

The Engineer, Application & API Security is a hands-on member of the E-WAAP team responsible for implementing and operating Akamai security configurations for McDonald’s web and API workloads. You will work closely with senior engineers, developers, and product teams to:

• Onboard new applications and APIs to Akamai.
• Configure and validate WAF/CDN/bot policies in staging and production.
• Support incident investigations, tuning, and change management.

This role is ideal for someone who enjoys hands-on engineering at the edge, wants to grow towards technical leadership, and thrives in a global, highly collaborative environment.

Responsibilities & Accountabilities:

• Implementation & operations
• Execute onboarding of new web and API services onto Akamai, following E-WAAP intake, design, and implementation standards.
• Implement and maintain WAF, caching, origin, routing, and bot rules in Akamai based on designs from Senior Engineers and architects.
• Perform staging and production validations, including functional checks, logging verification, performance assessment, and rollback readiness.
• Support DDoS and high-traffic event preparations (e.g., promotions, product launches) by validating rules, load behavior, and monitoring dashboards.
• Security monitoring & tuning
• Monitor Akamai, WAF, and API security dashboards for anomalies, attacks, or performance regressions; escalate and investigate as needed.
• Analyze WAF logs to identify blocked attacks, false positives, and potential misconfigurations; propose tuning changes to Senior Engineers.
• Apply approved changes to security rulesets, rate limits, bot categories, and exceptions in a controlled manner with proper documentation.
• Dev & automation
• Use scripts and automation (e.g., Python, shell, Akamai CLI/API) to perform bulk changes, configuration comparisons, and standardization tasks.
• Contribute to internal tooling to simplify configuration deployments, environment promotions, and validation.
• Support integration of Akamai checks and validations into CI/CD pipelines in partnership with development and platform teams.
• Collaboration, documentation & process
• Work directly with application and product teams to understand requirements, explain security behaviors, and troubleshoot issues.
• Maintain detailed runbooks, implementation guides, and operational SOPs in Confluence; keep Jira/ServiceNow records accurate and up to date.
• Participate in Agile ceremonies (stand-ups, sprint planning, retrospectives) as part of the E-WAAP product team.