WAF Operations Engineer: Cloud Security & IaC

EY; Atlanta (GA); Hybrid; USD 83,000 - 136,000; Full time

Benefits offered by this job

Comprehensive compensation & benefits

Hybrid work model

Professional development & mentorship

Job summary

EY is seeking a WAF Operations Solution Engineer to deploy and manage web application firewalls across client applications. You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to strengthen security posture using Cloudflare, Imperva, and Terraform.

The role emphasizes change management, problem resolution, and maintaining optimal WAF performance in a fast-paced environment. Hybrid work expectations apply in this client-facing role.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field.
• 1–2 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation preferred.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Certs such as CISSP or Security+ are a plus.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Conduct root-cause analysis and remediation for security incidents.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.

Skills

WAF operations

Incident response

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to deploy and manage web application firewalls across client applications. You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to strengthen security posture using Cloudflare, Imperva, and Terraform.

The role emphasizes change management, problem resolution, and maintaining optimal WAF performance in a fast-paced environment. Hybrid work expectations apply in this client-facing role.