WAF Operations Engineer — Cloud Security & IaC

EY

Denver (CO)

Hybrid

USD 82,500 - 136,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical and dental coverage

Pension & 401(k)

Paid time off

Hybrid work model

Flexible vacation policy

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls across client environments. You will monitor traffic, analyze security events, respond to incidents, and collaborate with incident response teams to strengthen security.

The role emphasizes hands-on work with Cloudflare and Imperva, Terraform IaC automation, and ongoing policy development. EY offers a hybrid work model, competitive compensation, comprehensive benefits, and opportunities for

Qualifications

Bachelors preferred in CS/IT/C cybersecurity.
1-2 years of web application security operations experience, focusing on WAF management.
Hands-on experience with Cloudflare and Imperva WAFs is required.
Proficiency with Terraform for infrastructure automation preferred.
Strong understanding of web app protocols and security best practices.
Familiarity with ITIL processes and incident management.
Certifications (e.g., CISSP, Security+) are a plus.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and in fast-paced teams.

Responsibilities

Configure and optimize WAF solutions to establish effective security controls for web applications.
Provide ongoing operational coverage of web application firewalls.
Monitor application traffic and security events to identify threats and vulnerabilities.
Analyze security incidents, including root cause analysis and remediation.
Collaborate with incident response teams to investigate and respond to incidents promptly.
Develop and maintain WAF policies, rules, and documentation.
Support security audits and assessments to meet standards and policies.
Stay current with emerging threats and technologies to enhance security posture.
Utilize Cloudflare and Imperva for deployment and management of WAFs.
Leverage Terraform IaC to automate deployment of WAF solutions.