Senior WAF Operations Engineer (Cloudflare/Imperva)

EY; Rogers (AR); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions for client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to enhance security posture.

In this role, you will configure WAFs, maintain policies, and support security audits. Experience with Cloudflare and Imperva, plus Terraform for IaC, is required.

Qualifications

• Bachelor’s degree in a related field.
• 3–5 years of experience in web application security operations.
• Hands-on experience with WAFs such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Configure, manage, and optimize WAF solutions for secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to detect threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams to investigate security incidents.
• Develop and maintain WAF policies and documentation.
• Support security audits and assessments; stay updated on threats.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Cloudflare

Imperva

Incident response

Security operations

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions for client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to enhance security posture.

In this role, you will configure WAFs, maintain policies, and support security audits. Experience with Cloudflare and Imperva, plus Terraform for IaC, is required.