Senior WAF Operations Engineer - Web App Security

EY; Raleigh (NC); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions protecting client applications from cyber threats. You will configure and provide ongoing operational coverage, monitor traffic, analyze security events, and respond to incidents to uphold the integrity of web applications.

You will collaborate with cross-functional teams, develop and maintain WAF policies, and stay current with emerging threats.

Qualifications

• 3–5 years of web application security operations and WAF management.
• Hands-on experience with Cloudflare and Imperva.
• Terraform automation experience preferred.
• Familiarity with ITIL processes and incident management.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats.
• Analyze security incidents and perform root-cause analysis.
• Collaborate with incident response teams to respond to incidents.
• Develop WAF policies, rules, and documentation.
• Support security audits and compliance activities.
• Stay current with threats and security technologies.
• Use Cloudflare and Imperva for implementation and management.
• Leverage Terraform for IaC to automate deployments.
• Mentor junior engineers on WAF management and incident response.

Skills

Analytical skills

Problem-solving

Communication skills

Independent worker

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions protecting client applications from cyber threats. You will configure and provide ongoing operational coverage, monitor traffic, analyze security events, and respond to incidents to uphold the integrity of web applications.

You will collaborate with cross-functional teams, develop and maintain WAF policies, and stay current with emerging threats.