WAF Operations Engineer — Cloud Security & IaC

EY; Louisville (KY); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Flexible vacation

Job summary

EY is seeking a WAF Operations Solution Engineer to safeguard client web applications using Cloudflare and Imperva, with Terraform for IaC automation. This role emphasizes incident response, security monitoring, and collaboration across teams to strengthen defenses.

As part of EY's security practice, you will configure, maintain, and optimize WAF environments, support audits, and mentor junior engineers while advancing your career in a fast-paced, globally connected firm.

Qualifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field.
• 3-5 years of experience in web application security operations, focused on WAF management.
• Hands-on experience with Cloudflare and Imperva required.
• Proficiency with Terraform for infrastructure automation preferred.
• Knowledge of ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web apps.
• Provide ongoing operational coverage for web application firewalls.
• Monitor application traffic and security events for threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams during security events.
• Develop and maintain WAF policies and documentation.
• Support security audits and compliance activities.
• Stay current on threats and security technologies.
• Mentor junior engineers on WAF management and incidents.

Skills

WAF management

Security operations

Incident response

Threat detection

Communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to safeguard client web applications using Cloudflare and Imperva, with Terraform for IaC automation. This role emphasizes incident response, security monitoring, and collaboration across teams to strengthen defenses.

As part of EY's security practice, you will configure, maintain, and optimize WAF environments, support audits, and mentor junior engineers while advancing your career in a fast-paced, globally connected firm.