WAF Operations Engineer - Cloud Security & IaC (Remote)

Ernst & Young Oman; Boston (MA); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will configure WAFs, monitor traffic, analyze incidents, and collaborate with cross-functional teams to enhance security.

Role requires hands-on WAF experience with Cloudflare and Imperva, plus IaC skills in Terraform. Hybrid work model with opportunities for professional growth in cybersecurity within a global firm.

Qualifications

• Bachelor’s degree preferred.
• 3–5 years of experience in web application security operations.
• Hands-on experience with Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Familiarity with ITIL processes and incident management.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents, perform root cause analysis and remediation.
• Collaborate with incident response teams to respond to incidents promptly.
• Develop and maintain WAF policies, rules, and documentation.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

ITIL

Security fundamentals

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

CISSP

Security+

Tools

Terraform

Cloudflare

Imperva

Job description

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will configure WAFs, monitor traffic, analyze incidents, and collaborate with cross-functional teams to enhance security.

Role requires hands-on WAF experience with Cloudflare and Imperva, plus IaC skills in Terraform. Hybrid work model with opportunities for professional growth in cybersecurity within a global firm.