AppSec Managed Services Specialist

We are looking for an AppSec Managed Services who will manage, monitor, and continuously improve enterprise security platforms. The role will support application security, vulnerability management, identity and access security, web application protection, and security incident response.

Key Responsibilities

• Administer and support Akamai, Checkmarx, Okta, Qualys, and Radware security platforms.

• Monitor security alerts, vulnerabilities, suspicious traffic, authentication events, and application security findings.

• Maintain and tune Web Application Firewall or WAF policies, security rules, allowlists, blocklists, and protection profiles.

• Manage application security scans, including SAST and software dependency scanning.

• Investigate findings, identify false positives, and provide remediation guidance to development and technology teams.

• Support vulnerability scanning, reporting, remediation tracking, rescanning, and risk-acceptance processes.

• Assist with application onboarding and integration into security platforms.

• Support SAML, OpenID Connect, OAuth, MFA, and other identity-related integrations.

• Assist with DDoS detection, mitigation, and application security incident response.

• Integrate security testing into CI/CD pipelines and promote secure development practices.

• Prepare security reports, dashboards, documentation, and audit evidence.

• Coordinate with development, DevOps, infrastructure, cloud, network, IAM, SOC, and vendor support teams.

Qualifications

• Relevant experience in application security, cybersecurity operations, vulnerability management, or security platform administration.

• Hands-on experience with one or more of the following:

  • Akamai

  • Checkmarx

  • Okta

  • Qualys

  • Radware

• Knowledge of WAF, vulnerability scanning, identity and access management, DDoS protection, and application security testing.

• Familiarity with SAST, SCA, secure SDLC, CI/CD security integration, and OWASP security practices.

• Experience investigating security alerts, vulnerabilities, and application-layer threats.

• Strong troubleshooting, documentation, stakeholder management, and communication skills.

• Ability to work with cross-functional technical and business teams.

Preferred Qualifications

• Experience integrating security scanning tools with Jenkins, Azure DevOps, or similar CI/CD platforms.

• Understanding of SAML, OAuth, OpenID Connect, MFA, TLS, and application authentication.

• Exposure to incident response, audit support, security reporting, and risk management.

• Relevant cybersecurity or application security certification is an advantage.