WAF Operations Engineer: Cloud Security & IaC Automation

Ernst & Young Oman; Southfield (MI); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Flexible vacation policy

Paid time off

Job summary

Ernst & Young LLP (EY) seeks a WAF Operations Solution Engineer to configure and run web application firewall platforms across client environments. You will monitor traffic, analyze events, and respond to incidents to protect applications.

You’ll implement policies, assist with change requests, and collaborate with cross-functional teams to enhance security. The role emphasizes Terraform-based automation and incident response excellence.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• 3–5 years of experience in web application security operations focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Terraform for infrastructure automation is preferred.
• Strong understanding of web app protocols, security principles, and ITIL/case management.

Responsibilities

• Configure, manage, and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents and perform root-cause analysis and remediation.
• Collaborate with incident response teams to investigate security incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments to meet compliance needs.
• Stay updated on threats and security technologies to improve posture.
• Utilize WAF solutions including Cloudflare and Imperva; leverage Terraform for IaC.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Incident response

Security auditing

Cloud security

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

Ernst & Young LLP (EY) seeks a WAF Operations Solution Engineer to configure and run web application firewall platforms across client environments. You will monitor traffic, analyze events, and respond to incidents to protect applications.

You’ll implement policies, assist with change requests, and collaborate with cross-functional teams to enhance security. The role emphasizes Terraform-based automation and incident response excellence.