WAF Operations Engineer: Automate & Secure Web Apps

Ernst & Young Oman; Charleston (WV); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical coverage

Dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will monitor traffic, respond to incidents, and collaborate with cross-functional teams to enhance security posture.

The role emphasizes change requests, incident resolution, and automation using Terraform, Cloudflare, and Imperva, with mentorship of junior engineers and ongoing security improvements.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity, or a related field preferred.
• 3–5 years of experience in web application security operations, with a focus on WAF management.
• Hands-on experience with Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.
• Provide support for security audits and assessments, promoting adherence to security standards and policies.
• Stay current with emerging threats, vulnerabilities, and security technologies to enhance the organization's security posture.
• Utilize various WAF solutions, including Cloudflare and Imperva, for implementation and management, ensuring optimal configuration and performance.
• Leverage Terraform for infrastructure as code (IaC) to automate the deployment and management of WAF solutions.
• Mentor junior engineers and provide guidance on WAF management and incident response processes.

Skills

WAF management

Security operations

Incident response

ITIL concepts

Communication skills

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Terraform

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will monitor traffic, respond to incidents, and collaborate with cross-functional teams to enhance security posture.

The role emphasizes change requests, incident resolution, and automation using Terraform, Cloudflare, and Imperva, with mentorship of junior engineers and ongoing security improvements.