Senior WAF Operations Engineer | Cloudflare/Imperva | IaC

Ernst & Young Oman; Atlanta (GA); Hybrid; USD 105,000 - 192,000; Full time

Job summary

Ernst & Young LLP (EY) is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, ensuring optimal security and performance for client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen the organization’s security posture.

Join EY in a hybrid work model, contributing to incident response efforts and policy development using Cloudflare, Imperva, and Terraform.

Qualifications

• Bachelor’s degree in CS/IT/cybersecurity.
• 3–5 years in web application security operations focusing on WAF.
• Hands-on with Cloudflare and Imperva required.
• Experience with Terraform preferred.

Responsibilities

• Configure, manage, and optimize WAF solutions for web apps.
• Provide ongoing operational coverage of WAFs.
• Monitor traffic and security events to identify threats.
• Analyze incidents and perform remediation/root-cause analysis.
• Collaborate with incident response teams to address incidents.
• Develop and maintain WAF policies and documentation.
• Support security audits and compliance activities.
• Stay updated on threats and security technologies.
• Utilize Cloudflare and Imperva for deployment and management.
• Leverage Terraform for IaC automation.
• Mentor junior engineers.

Skills

WAF management

Security incident response

Threat analysis

Cross-functional collaboration

ITIL processes

Analytical skills

Communication skills

Education

Bachelor’s degree in Computer Science / IT / Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

Ernst & Young LLP (EY) is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, ensuring optimal security and performance for client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen the organization’s security posture.

Join EY in a hybrid work model, contributing to incident response efforts and policy development using Cloudflare, Imperva, and Terraform.