WAF Operations Engineer — Cloud Security & Automation

Ernst & Young Advisory Services Sdn Bhd; Chicago (IL); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring secure client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with incident response teams and cross-functional groups.

Experience with Cloudflare, Imperva, and Terraform IA C is preferred. You will work in a hybrid model with location flexibility, supporting change requests and security audits, and mentoring junior engineers

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• 3-5 years of experience in web application security operations, focused on WAF management.
• Hands-on with WAF solutions such as Cloudflare and Imperva; Terraform for IaC preferred.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls and performance.
• Monitor traffic and security events; analyze incidents and perform root-cause analysis.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation for compliance.
• Support security audits and assessments; stay current with threats and technologies.
• Mentor junior engineers on WAF management and incident response processes.

Skills

WAF operations

Incident response

Security monitoring

Threat analysis

Analytical thinking

Independent worker

Education

Bachelor’s degree in Computer Science or related field

Tools

Terraform

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring secure client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with incident response teams and cross-functional groups.

Experience with Cloudflare, Imperva, and Terraform IA C is preferred. You will work in a hybrid model with location flexibility, supporting change requests and security audits, and mentoring junior engineers