Senior WAF Operations Engineer - Web App Security

Ernst & Young Oman; Toledo (OH); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards package with benefits

Flexible vacation policy

Job summary

EY, a global professional services firm, seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring secure client apps and compliant operations.

You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to strengthen security posture using Cloudflare, Imperva, and IaC with Terraform.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field preferred.
• 3–5 years of experience in web application security operations, focused on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents, perform root-cause analyses, and remediation.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies and documentation; support audits and assessments.

Skills

WAF operations

Cybersecurity fundamentals

Analytical thinking

Communication

Independent worker

Education

Bachelor’s degree in CS/IT/C cybersecurity or related field

Tools

Cloudflare

Imperva

Terraform

Job description

EY, a global professional services firm, seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring secure client apps and compliant operations.

You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to strengthen security posture using Cloudflare, Imperva, and IaC with Terraform.