Senior WAF Operations Engineer – Cloud & IaC

EY; Akron (OH); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Salary range information

Hybrid work model

Flexible vacation policy

Job summary

EY seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications and data. You’ll monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen security posture.

Experience with Cloudflare, Imperva, and Terraform is required. The role emphasizes proactive threat detection, change requests, and continuous improvement in a fast-paced cybersecurity environment, with EY’s

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity, or related field preferred.
• 3–5 years of experience in web application security operations with a focus on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation preferred.
• Strong understanding of web app security principles and protocols.
• Familiarity with ITIL processes and incident management.
• Relevant certifications (e.g., CISSP, Security+) are a plus.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

• Configure, manage, and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.
• Provide support for security audits and assessments, promoting adherence to security standards and policies.
• Stay current with emerging threats, vulnerabilities, and security technologies to enhance the organization’s security posture.
• Utilize WAF solutions including Cloudflare and Imperva for implementation and management.
• Leverage Terraform for infrastructure as code to automate deployment and management of WAF solutions.
• Mentor junior engineers and provide guidance on WAF management and incident response processes.

Skills

Analytical thinking

Communication skills

Problem-solving

Teamwork

Independence

Education

Bachelor’s degree

Tools

Cloudflare

Imperva

Terraform

Job description

EY seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications and data. You’ll monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen security posture.

Experience with Cloudflare, Imperva, and Terraform is required. The role emphasizes proactive threat detection, change requests, and continuous improvement in a fast-paced cybersecurity environment, with EY’s