WAF Operations Engineer — Cloud Security & IaC (Terraform)

EY; Westlake Village (CA); Hybrid; USD 82,500 - 154,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications, ensuring performance and security. You will monitor traffic, analyze events, respond to incidents, and support change requests to protect web applications.

You will collaborate with cross-functional teams and stay updated on emerging threats and security technologies, leveraging Terraform for IaC automation and improving security posture across engagements.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related field preferred.
• 1–2 years experience in web application security operations, focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation is preferred.

Responsibilities

• Configure and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Analyze security incidents and perform remediation efforts.
• Collaborate with incident response teams to investigate security incidents.

Skills

Analytical thinking

Communication

Independent worker

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications, ensuring performance and security. You will monitor traffic, analyze events, respond to incidents, and support change requests to protect web applications.

You will collaborate with cross-functional teams and stay updated on emerging threats and security technologies, leveraging Terraform for IaC automation and improving security posture across engagements.