AppSec Managed Services Specialist
Summary
An application-security managed services role: the specialist administers and tunes enterprise security platforms (Akamai, Checkmarx, Okta, Qualys, Radware), monitors alerts and vulnerabilities, manages WAF policies and SAST/dependency scans, supports identity (SAML/OAuth/MFA) integrations, and assists with DDoS mitigation and incident response.
We are looking for an AppSec Managed Services who will manage, monitor, and continuously improve enterprise security platforms. The role will support application security, vulnerability management, identity and access security, web application protection, and security incident response.
Key Responsibilities
Administer and support Akamai, Checkmarx, Okta, Qualys, and Radware security platforms.
Monitor security alerts, vulnerabilities, suspicious traffic, authentication events, and application security findings.
Maintain and tune Web Application Firewall or WAF policies, security rules, allowlists, blocklists, and protection profiles.
Manage application security scans, including SAST and software dependency scanning.
Investigate findings, identify false positives, and provide remediation guidance to development and technology teams.
Support vulnerability scanning, reporting, remediation tracking, rescanning, and risk-acceptance processes.
Assist with application onboarding and integration into security platforms.
Support SAML, OpenID Connect, OAuth, MFA, and other identity-related integrations.
Assist with DDoS detection, mitigation, and application security incident response.
Integrate security testing into CI/CD pipelines and promote secure development practices.
Prepare security reports, dashboards, documentation, and audit evidence.
Coordinate with development, DevOps, infrastructure, cloud, network, IAM, SOC, and vendor support teams.
Qualifications
Relevant experience in application security, cybersecurity operations, vulnerability management, or security platform administration.
Hands-on experience with one or more of the following:
Akamai
Checkmarx
Okta
Qualys
Radware
Knowledge of WAF, vulnerability scanning, identity and access management, DDoS protection, and application security testing.
Familiarity with SAST, SCA, secure SDLC, CI/CD security integration, and OWASP security practices.
Experience investigating security alerts, vulnerabilities, and application-layer threats.
Strong troubleshooting, documentation, stakeholder management, and communication skills.
Ability to work with cross-functional technical and business teams.
Preferred Qualifications
Experience integrating security scanning tools with Jenkins, Azure DevOps, or similar CI/CD platforms.
Understanding of SAML, OAuth, OpenID Connect, MFA, TLS, and application authentication.
Exposure to incident response, audit support, security reporting, and risk management.
Relevant cybersecurity or application security certification is an advantage.
