WAF Operations Engineer - Cloud Security & Automation

EY; Sacramento (CA); On-site; USD 125,800 - 218,500; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Job summary

EY in the United States is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewalls, protecting client applications from cyber threats.

You will monitor traffic, respond to incidents, and configure WAFs (Cloudflare, Imperva) while using Terraform for IaC. Collaboration with incident response teams and cross-functional groups is essential to strengthen security posture.

Qualifications

• Bachelor’s degree preferred in CS/IT/Cybersecurity.
• 3–5 years of web security operations with WAF focus.
• Hands-on with Cloudflare and Imperva required.
• Terraform for IaC preferred.
• Strong understanding of web app security and ITIL processes.
• Certs like CISSP or Security+ are a plus.
• Excellent analytical and communication skills.

Responsibilities

• Configure, manage, and optimize WAF solutions for web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response to investigate incidents.
• Develop and maintain WAF policies and documentation.
• Support security audits and assessments.
• Stay current with threats and security technologies.
• Utilize WAFs (Cloudflare, Imperva) and Terraform for deployment.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Terraform

Cloudflare

Imperva

Incident response

Security analytics

ITIL

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY in the United States is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewalls, protecting client applications from cyber threats.

You will monitor traffic, respond to incidents, and configure WAFs (Cloudflare, Imperva) while using Terraform for IaC. Collaboration with incident response teams and cross-functional groups is essential to strengthen security posture.