WAF Operations Engineer — Cloud Security & IaC (Terraform)

EY; Charleston (WV); On-site; USD 82,500 - 136,000; Full time

Benefits offered by this job

Medical & dental coverage

401(k) plan

Hybrid work model

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will configure and maintain WAFs, monitor traffic and incidents, and collaborate with cross-functional teams to improve security posture.

You will work with TOOLS like Cloudflare, Imperva, and Terraform to automate deployment and security measures while staying current on emerging threats and best practices.

Qualifications

• 1-2 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Certifications like CISSP or Security+ are a plus.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.

Skills

Analytical skills

Communication skills

Problem-solving

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will configure and maintain WAFs, monitor traffic and incidents, and collaborate with cross-functional teams to improve security posture.

You will work with TOOLS like Cloudflare, Imperva, and Terraform to automate deployment and security measures while staying current on emerging threats and best practices.