WAF Operations Engineer: Cloud Firewall & IaC Automation

EY; Raleigh (NC); On-site; USD 82,500 - 154,000; Full time

Benefits offered by this job

Total Rewards package

Hybrid work options

Flexible vacation policy

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, ensuring optimal performance and security for client applications. You will monitor traffic, respond to incidents, and collaborate across teams to enhance security posture.

The role emphasizes hands-on work with Cloudflare and Imperva, plus IaC using Terraform, within a dynamic security operations environment.

Qualifications

• Bachelor's degree or equivalent in CS/IT/Cybersecurity preferred.
• 1–2 years in web app security operations focusing on WAF management.
• Hands-on with Cloudflare and Imperva WAFs.
• Terraform for infrastructure automation preferred.
• Strong knowledge of web app protocols and security principles.
• Familiarity with ITIL and ticketing systems for incident management.
• Certifications (CISSP, Security+) are a plus.
• Excellent analytical, problem-solving, and communication skills.

Responsibilities

• Configure and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats.
• Analyze security incidents, perform root cause analysis, and remediate.
• Collaborate with incident response teams to investigate security incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments and ensure policy adherence.
• Stay current with emerging threats and technologies to improve security.

Skills

WAF operations

Incident response

Security analysis

Communication skills

Independent work

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, ensuring optimal performance and security for client applications. You will monitor traffic, respond to incidents, and collaborate across teams to enhance security posture.

The role emphasizes hands-on work with Cloudflare and Imperva, plus IaC using Terraform, within a dynamic security operations environment.