Sr. Security Engineer

Yum! Brands is seeking a Senior Security Engineer to join its Cybersecurity Engineering team and protect its global digital platforms. The role focuses on securing web applications and APIs, managing WAF and CDN configurations, maintaining TLS certificates, investigating incidents, and delivering automated, scalable security solutions.

Responsibilities:

• Design, implement, and optimize Web Application Firewall (WAF) protections using Akamai (or similar platforms)
• Secure enterprise web applications and APIs against modern cyber threats, including OWASP Top 10, DDoS, bots, and API attacks
• Manage CDN configurations and public TLS certificate lifecycle
• Investigate security incidents, tune security policies, and improve platform performance
• Drive automation, operational excellence, and continuous improvement
• Partner with engineering, cloud, networking, and business teams to deliver secure, scalable solutions

Requirements:

• Experience with enterprise WAF technologies (Akamai preferred; Cloudflare, Imperva, F5, AWS WAF also considered)
• Strong knowledge of HTTP/S, TLS/SSL, DNS, TCP/IP, CDN architecture, REST APIs, and web application security
• Experience managing certificates, troubleshooting production environments, and responding to security incidents
• Scripting or automation experience (PowerShell, Python, Bash) is a plus
• Security certifications such as CISSP, Security+, GSEC, or Akamai certifications are a bonus