Supporting Products within the Digital Edge & Cyber Security Product Offerings.
Mainly CDN to secure and optimise the banking infrastructure
SSL Handshake
EDGE load implementation for Web Apps
Skillsets Required
Understanding of Networking and Cybersecurity principles including:
- DNS Resolution and IP
- HTTP/S Methods, Headers, Status Codes
- TCP handshake
- OSI Model and Communications Framework
- Attack Vectors and Methods such as DDoS, SQL, CSS, CMD Injection, LFI and Web Protocol Attacks, Botnet
- Certificates and TLS Encryption
- Caching and Storage on Edge
- Content Delivery Network and Edge Computing
- Border Gateway Protocol (BGP) and ACL's
- Zero Trust Architecture
- Threat Intelligence, SIEM Data and Traffic Reporting
- Proxies and Reverse Proxies to manage Ingress/Egress
- Cloud infrastructure, particularly
Scope of Services
Mainly via CDN to secure and optimise the banking infrastructure:
- Ability to carry out WAF/Security/Bot Manager Reviews and Inspection of traffic to the edge and origin to determine threats/vulnerabilities
- Implement Alerting and Monitoring appropriate for system errors and threats
- Generation and Upload of Certificates for SSL handshake
- Implement load balancing capabilities at the Edge for Web Apps
- Implement path based routing of client traffic to relevant infrastructure
- Proactively manage security configurations associated with hostnames by interacting with the application teams for max availability, smallest attack surface prioritisation
- Ability to implement caching and storage
- Ability to edit/Implement sorry pages that handle errors effectively on Net storage based on use case
- Validation and implementation of different HTTP methods based on Application requirements - security implications of this and mitigation
- Respond to both production and pre-production incidents in a timely manner.
- Support teams on digital modernisation journey with technical debugging both in the Akamai layer and downstream infrastructure