Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast.

Job Summary

"Responsible for contributing towards the build and maintenance of the organization's cyber security systems and infrastructure. Exercises solid knowledge of engineering skills and methodology with a working knowledge of applicable cyber security compliance standards. Conducts security assessments and audits to identify cybersecurity risks within the company's networks, applications and operating systems. Helps secure and protect the Network Infrastructure: Routers, Switches, Optical Devices, L2 Datacenter and cabling, Strand Mounted devices, Secure Routing protocols, DOCSIS plant (CMTS/vCMTS/PON), SDN, best practice device configuration, network automation, monitoring and troubleshooting. Tests company's internal systems to validate security and detect any computer and information security weaknesses. Performs a technical analysis of vulnerabilities and determines the impacts to the organization Reports, tracks and records findings in a comprehensive vulnerability assessment report. Identifies and recommends appropriate action to mitigate vulnerabilities and reduce potential impacts on cybersecurity resources. Applies long-term objectives and plans related to the company's technical vision to daily activity. Applies innovative solutions for cyber engineering developmental problems that are competitive with industry and company standards. Has in-depth experience, knowledge and skills in own discipline. Usually determines own work priorities. Acts as a resource for colleagues with less experience.

Job Description

Job Title: Akamai WAF Engineer – Engineer 3

Role Summary

The Akamai WAF Engineer 3 is responsible for designing, deploying, optimizing, and troubleshooting Akamai Web Application Firewall (WAF) solutions in large-scale, high-traffic environments.
This role requires deep hands-on expertise, ownership of complex incidents, and the ability to mentor junior engineers while working closely with application, SOC, and DevOps teams.

Key Responsibilities

WAF Engineering & Operations

• Design, implement, and manage Akamai WAF policies for web and API protection
• Tune WAF rules to reduce false positives while maintaining strong security posture
• Configure protections for:
  • OWASP Top 10
  • API abuse and schema violations
  • Bot attacks and credential stuffing
  • Layer 7 DDoS attacks
• Perform advanced troubleshooting of complex production issues

Security Use Cases & Enhancements

• Implement custom rules using Akamai App & API Protector and Kona Rule Sets
• Support zero-day mitigation and virtual patching for critical CVEs
• Integrate WAF signals with SOC workflows and SIEM platforms
• Lead POCs and evaluate new Akamai security features

Automation & Integration

• Automate WAF configuration and reporting using:
  • Akamai APIs
  • Terraform / CI-CD pipelines
• Collaborate with DevOps teams to embed WAF into application delivery pipelines
• Enable logging and telemetry integrations for centralized visibility

Incident Response

• Act as L3 escalation point for WAF-related incidents and outages
• Perform root cause analysis (RCA) and post-incident reviews
• Mentor L1/L2 engineers and provide technical guidance
• Participate in on-call rotations and critical incident bridges

Required Skills & Experience

Technical Skills

• 5–7.5 years of experience in Web Application Security
• Strong hands-on expertise with Akamai WAF / App & API Protector
• Deep understanding of:
  • HTTP/HTTPS, TLS, cookies, headers
  • Web architectures and microservices
  • REST and GraphQL APIs
• Strong knowledge of:
  • OWASP Top 10
  • MITRE ATT&CK (application-layer focus)
• Experience with SIEM tools (Splunk, Elastic, etc.)

Automation & Scripting

• Experience with:
  • REST APIs
  • Python / Bash scripting
  • Infrastructure-as-Code (Terraform preferred)

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education

Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Certifications (if applicable)

Relevant Work Experience

5-7 Years

Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.