The Sr Information Security Engineer- Application Security is responsible for leading the design, development, and implementation of advanced cybersecurity strategies and infrastructure across the organization. This role includes overseeing security tooling, mentoring junior staff, and ensuring best-in-class protection of digital assets against emerging threats. This position will have a focus within Web Application Firewall, Bot Management, and work closely with Akamai.

This position is located in Springfield, MO and will require on-site work on a regular basis.

Responsibilities and Duties:

WAF Governance & Operations:

• Develop and maintain custom WAF rulesets for application-specific protections.
• Monitor WAF logs and analytics to identify false positives, tuning thresholds and exceptions accordingly.
• Conduct regular WAF policy reviews with AppDev and SRE to align with evolving application architectures.
• Integrate WAF alerts into SIEM and incident response workflows.

Bot Management:

• Analyze bot traffic using behavioral scoring, fingerprinting, and anomaly detection.
• Lead POCs and production rollouts of Akamai Content Protector and Bot Manager Premier.
• Maintain dashboards and reporting for bot activity, blocked requests, and mitigation effectiveness.

Cross-Team Collaboration:

• Act as InfoSec liaison to AppDev and SRE teams for Akamai-related security initiatives.
• Participate in sprint planning and release reviews to ensure WAF and bot protections are considered early.
• Provide security guidance on CDN/ION, Site Shield, FastDNS, and Prolexic configurations.
• Facilitate tabletop exercises and post-incident reviews involving Akamai services.

Strategic & Operational Oversight:

• Track Akamai security service usage and performance metrics to identify optimization opportunities.
• Coordinate with Akamai account teams and professional services for roadmap alignment and escalations.
• Contribute to enterprise security architecture discussions involving edge security and traffic routing.

Skills:

Required:

• 5+ years in InfoSec with hands-on experience in Akamai WAF and bot mitigation.
• Strong understanding of web application security, HTTP protocol behavior, and bot evasion techniques.
• Experience working with cross-functional teams in agile environments.
• Familiarity with CI/CD pipelines, SRE principles, and cloud-native architectures.
• Applies comprehensive knowledge / skill, acts with independence and provides guidance and training to others.
• Maintains systems/services and information security, integrity, compliance and continuity.
• Implements transaction security and computer/network virus protection.
• Ensures the confidentiality, integrity, and availability of information.
• Follows confidentiality procedures, ensuring that restricted information is only shared with approved recipients, that data sharing is done so using approved/secure communication methods, and that data is kept safe and secure at all times.
• Understands, deploys, and manages cloud-based infrastructure and services.
• Creates the rules for requirements and design quality, performs verification activities, and maintains quality control.
• Archives, backs up, and restores data and servers to specified states.
• Creates clear, comprehensive, effective, and user-friendly guides, manuals, narratives, and reports that convey complex technical concepts, using documentation tools to craft structured and visually appealing content that meets the intended purposes.
• Determines and analyzes trends from data that is collected to assist in compiling reports that will help in decision-making.

Preferred:

• Acquires, organizes, protects and processes data in order to fulfill business objectives.
• Proficiently uses and troubleshoots a wide range of IT hardware, software, and network systems to ensure optimal performance and user experience.
• Understands and effectively uses standard office equipment and standard software packages to support business processes.
• Understands, evaluates, uses, and engages with digital technology and information, as well as creates and shares digital content, while being aware of essentials like safety, privacy and ethical considerations.

Education: Bachelor's Degree or Equivalent Level

Experience: Experienced practitioner able to deal with the majority of situations and to advise others (3 to 6 years)

Managerial Experience: Experience with general supervision of more junior colleagues (7 to 12 months)

O’Reilly Auto Parts has a proven track record of growth and stability. O’Reilly is full of successful career stories and believes in a strong promote-from-within philosophy, encouraging you to grow your career along with the organization. 

Total Compensation Package:

• Competitive Wages & Paid Time Off

• Stock Purchase Plan & 401k with Employer Contributions Starting Day One

• Medical, Dental, & Vision Insurance with Optional Flexible Spending Account (FSA)

• Team Member Health/Wellbeing Programs

• Tuition Educational Assistance Programs

• Opportunities for Career Growth

O’Reilly Auto Parts is an equal opportunity employer. The Company does not discriminate on the basis of race, religion, color, national origin or ancestry (including immigration status or citizenship), sex, sexual orientation, gender identity, pregnancy (including childbirth, lactation, and related medical conditions,) age (40 and over), veteran status, uniformed service member status, physical or mental disability, genetic information (including testing or characteristics) or another protected status as defined by local, state, or federal law, as applicable.

Qualified individuals with a disability may be entitled to reasonable accommodation under the Americans with Disabilities Act. If you require a reasonable accommodation during the application or employment process, please send an email to: [email protected] or call (800) 471-7431 option , and provide your requested accommodation, and position details.