WAF Operations Engineer - Cloud Security & Automation

EY; Jericho (NY); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will monitor traffic, analyze security events, respond to incidents, and collaborate across teams to improve security posture.

You will use Cloudflare and Imperva, automating deployment with Terraform, and mentor junior engineers while maintaining high security standards in a hybrid, US-wide environment.

Qualifications

• 3–5 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation is preferred.
• Strong understanding of web app protocols, security principles and ITIL incident management is a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Analyze security incidents and perform root cause analysis and remediation.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments and stay current with threats and technologies.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Analytical thinking

Problem solving

Communication

Independent work

Education

Bachelor’s degree in CS/IT/cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will monitor traffic, analyze security events, respond to incidents, and collaborate across teams to improve security posture.

You will use Cloudflare and Imperva, automating deployment with Terraform, and mentor junior engineers while maintaining high security standards in a hybrid, US-wide environment.