WAF Operations Engineer - Cloud Security & Automation

Ernst & Young Oman; Louisville (KY); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical & dental

Pension & 401(k)

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and provide ongoing operational coverage of web application firewalls, safeguarding client applications. You will work with Cloudflare and Imperva, and leverage Terraform for IaC to automate deployments.

Join a team that monitors traffic, analyzes security events, responds to incidents, and strengthens the security posture across cross-functional teams while mentoring junior engineers.

Qualifications

• 3-5 years of experience in web application security operations or similar.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Bachelor’s degree in CS/IT/cybersecurity or related field preferred.

Responsibilities

• Configure, manage and optimize WAF solutions for web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to detect threats.
• Analyze security incidents and perform root-cause analysis.
• Collaborate with incident response teams to respond to incidents.
• Develop and maintain WAF policies, rules and documentation.
• Support security audits and assessments.
• Stay current with threats and security technologies.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

Information security

Education

Bachelor's degree

Tools

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and provide ongoing operational coverage of web application firewalls, safeguarding client applications. You will work with Cloudflare and Imperva, and leverage Terraform for IaC to automate deployments.

Join a team that monitors traffic, analyzes security events, responds to incidents, and strengthens the security posture across cross-functional teams while mentoring junior engineers.