WAF Operations Engineer - Cloud Security & IaC

EY; Portland (OR); Hybrid; USD 82,500 - 136,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package (medical, dental

Flexible vacation policy

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic, analyze security events, and respond to incidents for client applications. You will collaborate with cross-functional teams to strengthen security posture and automate protections using Cloudflare, Imperva, and Terraform.

Qualified candidates have 1–2 years in web app security operations, hands-on WAF experience, and familiarity with ITIL processes; certifications are a plus,

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 1–2 years of web application security operations focused on WAF management.
• Hands-on experience with Cloudflare and Imperva.
• Terraform for infrastructure automation is preferred.
• Familiar with ITIL processes and ticketing systems.
• Certifications such as CISSP or Security+ are a plus.
• Strong analytical and communication skills.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring proper functionality.
• Monitor application traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents, perform root cause analysis, and implement remediations.
• Collaborate with incident response teams to investigate and respond to security incidents.
• Develop and maintain WAF policies, rules, and documentation per best practices and compliance.
• Support security audits and assessments; promote adherence to security standards.
• Stay updated on threats and security technologies to enhance posture.
• Utilize WAF solutions (Cloudflare, Imperva) and Terraform for IaC automation.

Skills

WAF management

Terraform

Incident response

Security best practices

ITIL familiarity

Industry certifications

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science/ IT/ Cybersecurity

Tools

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic, analyze security events, and respond to incidents for client applications. You will collaborate with cross-functional teams to strengthen security posture and automate protections using Cloudflare, Imperva, and Terraform.

Qualified candidates have 1–2 years in web app security operations, hands-on WAF experience, and familiarity with ITIL processes; certifications are a plus,