Senior WAF Operations Engineer – Web App Security

EY; Birmingham (AL); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Competitive salary

Paid time off

Job summary

EY seeks a WAF Operations Solution Engineer to configure and provide ongoing coverage of web application firewalls, ensuring security and performance for client applications. You will monitor traffic, analyze security events, respond to incidents, and implement automated security measures with Cloudflare and Imperva.

You will work with cross-functional teams, mentor junior engineers, and use Terraform to automate deployments.

Qualifications

• Bachelor's degree preferred in CS/IT/Cybersecurity or related field.
• 3–5 years of web application security operations experience, focusing on WAF management.
• Hands-on with Cloudflare and Imperva required.
• Familiar with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to security controls for web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats and vulnerabilities.
• Analyze incidents, perform root-cause analysis, and remediation.
• Collaborate with incident response to investigate and respond to security events.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments and stay current with threats.
• Use Cloudflare/Imperva and Terraform for implementation and automation.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

Security analysis

ITIL knowledge

Communication skills

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Terraform

Cloudflare

Imperva

Job description

EY seeks a WAF Operations Solution Engineer to configure and provide ongoing coverage of web application firewalls, ensuring security and performance for client applications. You will monitor traffic, analyze security events, respond to incidents, and implement automated security measures with Cloudflare and Imperva.

You will work with cross-functional teams, mentor junior engineers, and use Terraform to automate deployments.