Senior WAF Operations Engineer — Cloud Security & IaC

Ernst & Young Oman; Seattle (WA); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic, respond to incidents, and implement security policies across client applications. You will work with cross-functional teams and leverage Cloudflare, Imperva, and Terraform to automate security controls.

The role blends hands-on engineering with incident response, change management, and continuous improvement in a hybrid, client-facing environment in the United States.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• 3–5 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation.
• Strong understanding of web app protocols, security principles, and ITIL processes.
• Certs like CISSP or Security+ are a plus.
• Excellent analytical and communication skills; able to work independently.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats and vulnerabilities.
• Analyze security incidents and perform root cause remediation.
• Collaborate with incident response and cross-functional teams to improve security posture.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and ensure compliance with policies.
• Stay current on threats and technologies to bolster defenses.
• Utilize Cloudflare and Imperva for deployment and management; automate with Terraform.
• Mentor junior engineers in WAF management and incident response.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

Security monitoring

ITIL processes

Communication skills

Education

Bachelor’s degree in computer science / IT / cybersecurity

Tools

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic, respond to incidents, and implement security policies across client applications. You will work with cross-functional teams and leverage Cloudflare, Imperva, and Terraform to automate security controls.

The role blends hands-on engineering with incident response, change management, and continuous improvement in a hybrid, client-facing environment in the United States.