Senior WAF Operations Engineer: Security & Automation

EY; Tulsa (OK); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work model

Benefits package

Paid time off

Job summary

EY seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring optimal security and performance for client applications. You will monitor traffic, analyze security events, and respond to incidents while implementing automated security measures using leading WAF solutions.

You will work with Cloudflare and Imperva, leveraging Terraform for IaC, and align with ITIL incident management practices in a hybrid US-wide role.

Qualifications

• 3–5 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Familiarity with ITIL processes and incident management.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats and vulnerabilities.
• Analyze security incidents and perform root cause analysis and remediation.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.

Skills

Analytical thinking

Problem solving

Communication skills

Independent worker

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring optimal security and performance for client applications. You will monitor traffic, analyze security events, and respond to incidents while implementing automated security measures using leading WAF solutions.

You will work with Cloudflare and Imperva, leveraging Terraform for IaC, and align with ITIL incident management practices in a hybrid US-wide role.