Senior Edge Security Engineer
CoStar Group1 day ago
Arlington, VA, USASenior
Base Salary
$120k - $203k/yr
Responsibilities
- Lead CDN security strategy and operations across more than 50 high-traffic web properties.
- Design and tune Akamai Kona WAF policies to reduce false positives and protect against OWASP threats, DDoS, and emerging attack patterns.
- Drive bot management and anti-scraping efforts, including analysis of residential proxy abuse and low-and-slow scraping patterns.
- Analyze edge traffic to detect anomalies and respond to security incidents.
- Support secure deployment and scaling of edge security controls across cloud and CDN environments.
- Collaborate with Product, Security, DevOps, Legal, and development teams.
Requirements
- Bachelor’s degree from an accredited, not-for-profit, in-person university or college is required.
- At least 4 years of experience in edge security, web application security, or managing CDN security platforms for high-traffic web properties.
- Equivalent depth in another security domain with significant CDN exposure may be considered.
- Hands-on experience with WAF policy tuning, bot management, and rate limiting on a major CDN platform.
- Familiarity with OWASP Top 10, API security best practices, and traffic analysis.
- Ability to write scripts or automation in Python, JavaScript, or similar languages.
- Experience with dashboards and log-analysis tools such as Akamai WSA, OpenSearch, or Athena.
- Preferred experience with Akamai Kona Site Defender, Bot Manager, Client Reputation, and Site Shield.
- Preferred experience tuning bot detection using device fingerprinting, behavioral analysis, residential proxy detection, and machine-learning scoring models.
- Preferred experience with threat intelligence, edge security incidents, DDoS mitigation, scraping events, or active web-application exploitation.
- Preferred proficiency with Python, Terraform, or Ansible for automation and reporting.
- Understanding of edge security integration with origin infrastructure across public and private clouds.
- Familiarity with NIST, ISO 27001, and PCI DSS compliance frameworks.
- Strong written and verbal communication skills and a track record of commitment to prior employers.
Benefits
- Comprehensive medical, vision, dental, and prescription drug coverage.
- Life, legal, and supplementary insurance.
- Virtual and in-person mental health counseling for individuals and families.
- Commuter and parking benefits.
- 401(k) retirement plan with matching contributions.
- Employee stock purchase plan and paid time off.
- Tuition reimbursement, internal training, and professional and academic development support.
- On-site fitness center or reimbursed fitness center membership costs, depending on location.
- Access to employee resource groups.
- Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks.
- Hybrid schedule with work in the office Monday through Thursday and work from home on Friday.
- Position available in Arlington, Virginia; Richmond, Virginia; or Irvine, California.
Tech Stack
Categories
About CoStar Group
CoStar Group builds subscription databases, analytics, and online marketplaces for commercial and residential real estate professionals, investors, and advertisers. Its portfolio includes CoStar (research and data), LoopNet (commercial listings), and Apartments.com (rental listings), generating revenue from subscriptions, listings, and advertising. The company is publicly traded on NASDAQ (CSGP) and is headquartered in Arlington, Virginia, with inclusion in the S&P 500 index.