Senior WAF Operations Engineer - Secure Web Apps with IaC

Ernst & Young Oman; Stamford (CT); Remote; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications from cyber threats. You will monitor traffic, respond to incidents, and support changes to ensure security and performance.

This role emphasizes collaboration with security teams, hands-on work with Cloudflare and Imperva, and IaC automation using Terraform. EY offers hybrid options and a comprehensive rewards package.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• 3–5 years of web application security operations experience, focusing on WAF management.
• Hands-on experience with Cloudflare and Imperva required.
• Terraform for infrastructure automation preferred.
• Familiarity with ITIL processes and ticketing systems.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats.
• Analyze security incidents and perform root cause analysis.
• Collaborate with incident response teams to address incidents promptly.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments to meet compliance.
• Stay updated on threats and security technologies.
• Utilize WAFs including Cloudflare and Imperva for deployment and management.
• Leverage Terraform for IaC automation of WAF deployments.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

ITIL processes

Security certifications

Analytical skills

Communication skills

Independent & collaborative work

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Terraform

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications from cyber threats. You will monitor traffic, respond to incidents, and support changes to ensure security and performance.

This role emphasizes collaboration with security teams, hands-on work with Cloudflare and Imperva, and IaC automation using Terraform. EY offers hybrid options and a comprehensive rewards package.