Senior Security Engineer

Freelance Senior Security Engineer (DRWN)

Job title – Senior Security Engineer

Client Location – Berlin, Germany

Remote work offering – 20% (4 days per week on site)

Client Industry – E-commerce

Contract Length – 6 months (extension possible)

Contract type – Freelance

Project focus

Join the security team of a large online marketplace and take ownership of its edge and web application defense platform. You will tune WAF policies, rules and rate controls to cut attacks and false positives, investigate bot, scraping, credential stuffing and DDoS activity, support security incidents, and roll out configuration changes safely with tracking and rollback. The role also covers building attack reporting and dashboards, feeding findings into alerting, automating recurring tasks via APIs, infrastructure as code or scripting, onboarding new services with engineering teams, and documenting runbooks and rule decisions.

Key skills and Experience required

• Hands-on experience operating Akamai, Cloudflare or a comparable edge/WAF security platform
• Proven WAF rule tuning and false-positive handling in high-traffic environments
• Strong web security knowledge, including OWASP Top 10 and common HTTP attack patterns
• Investigating bot, scraping, credential stuffing and DDoS activity using SIEM, Kibana/ELK or similar
• Scripting in Python, shell or similar to automate security operations
• Hands-on AWS experience
• Understanding of prompt injection and AI-related attack vectors
• Incident response experience
• Fluent written and spoken English; German is a plus
• E-commerce or marketplace background is a plus