Principal Security Engineer

Navy Federal Credit Union • Vienna, VA

88d

About The Position

We are seeking a highly skilled and experienced Principal Cybersecurity Engineer to lead the design, implementation, and optimization of our web security infrastructure. This role will focus on advanced Bot defense, Application and API protection, and secure web delivery leveraging Akamai, Cequence and related technologies. The ideal candidate will have deep expertise in the current threat landscape, web architecture, and cloud security, with a strong foundation in modern security frameworks and tools. Proven experience with Akamai security and delivery products. Strong understanding of Bot defense mechanisms and threat intelligence.

Requirements

• Deep expertise in the current threat landscape, web architecture, and cloud security.
• Strong foundation in modern security frameworks and tools.
• Proven experience with Akamai security and delivery products.
• Strong understanding of Bot defense mechanisms and threat intelligence.
• Solid foundation in web delivery architecture, WAF and API security, DNS and Traffic Management, OWASP Top 10 and threat modeling.
• Familiarity with cloud environments, especially Azure.
• Excellent problem-solving, communication, and documentation skills.

Nice To Haves

• Industry certifications such as CISSP, CEH, or Azure Security Engineer Associate.
• Experience with SPL (Splunk) and/or SQL platforms (Hydrolix, Grafana).
• Experience in large-scale enterprise environments.
• Knowledge of compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS).

Responsibilities

• Architect and manage Akamai security solutions including CDN and WAF (Application and API Protector), Bot Manager, Premier Account Protector, Client-Side Protection and Compliance, Edge DNS, Global Traffic Manager, and Cloudlets.
• Lead Bot defense strategy and threat landscape analysis to proactively mitigate emerging threats.
• Review and testing of configuration changes.
• Collaborate with application and infrastructure teams to ensure secure API delivery and web architecture.
• Provide technical leadership in securing cloud-native applications.
• Develop and maintain security policies, standards, and procedures aligned with OWASP Top 10 and industry best practices.
• Conduct risk assessments, vulnerability scans, and remediation planning.
• Mentor junior engineers and contribute to the overall security engineering strategy.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Industry: Credit Intermediation and Related Activities