Security Consultant

Job Title: Security Consultant

Role Summary

We are seeking a Security Consultant to join our team as a
hands -on technical specialist in automated threats and application security. In
this role, you will be responsible for implementing, tuning, and maintaining
security controls that protect our e -commerce platform and customer experience.

You will collaborate closely with Security Engineers and Architects,
while acting as a technical bridge to Application, DevOps, and Operations teams - providing execution and advisory support across the security lifecycle.

Key Responsibilities

1. Bot Traffic Management & Edge Security

• Detect and
  mitigate advanced automated traffic, including headless browsers and human -mimicking bots.
  
• Analyze traffic
  patterns to identify and block threats such as credential stuffing, ATO,
  inventory scalping, and scraping.
  
• Implement and
  maintain edge protections including Akamai Bot Manager Premier (BMP), WAF, Content Protection Rules (CPR), and CDN configurations.
  

2. Application Security Through Entire SDLC

• Embed SAST
  (SonarQube) and DAST (Invicti) within the CI/CD pipeline in
  collaboration with DevOps.
  
• Triage
  vulnerabilities, reduce false positives, and ensure actionable remediation
  guidance for developers.
  
• Conduct targeted
  application and API security assessments using Burp Suite.
  

3. Security Enablement & Operational Support

• Partner with Application
  Teams to remediate vulnerabilities aligned with OWASP Top 10 and API security best practices.
  
• Support Production
  Operations by troubleshooting security incidents, tuning controls, and
  minimizing false positives or performance impact.
  
• Contribute to
  identifying and prioritizing security debt in coordination with
  business and engineering teams.
  

Technical Profile

• Experience: 5+
  years in application security, web security, or security incident
  management preferably in e -commerce or high -traffic environments.
  
• Threat Knowledge: Strong understanding of OWASP Automated Threats (OAT) and common
  attack patterns targeting online retail platforms.
  
• Tools &
  Platforms: Hands -on experience with one or more of the
  following: Invicti, Burp Suite, SonarQube, and bot
  mitigation tools (e.g., Akamai BMP, QuietAI).
  
• Technical
  Foundations: Familiarity with CDN/WAF architectures, API
  protocols (REST/GraphQL), and modern web application stacks.
  
• Collaboration: Ability to translate security findings into clear, actionable guidance for
  development and operations teams.
  

Soft Skills

·       Strong communication skills with the ability to
explain security risks and remediation clearly to technical and non -technical
stakeholders.

·       Collaborative mindset with experience working
across development, DevOps, and operations teams.

·       Analytical thinking and problem -solving skills,
especially when investigating complex or ambiguous security issues.

·       Ability to prioritize effectively in a fast -paced,
production -driven environment.

·       Proactive and ownership -driven approach to
improving security posture and processes.

Team Dynamics

This role is focused on execution, analysis, and enablement. You
will operate within the frameworks defined by Security Architects and Engineers,
while serving as a key partner to application, DevOps, and operations teams to
ensure security controls are effective and sustainable.

Requirements