WAF Operations Engineer — Cloudflare/Imperva & IaC

EY

Arlington (VA)

Hybrid

USD 105,000 - 192,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Hybrid work model

Total Rewards package

Flexible vacation policy

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage firewall solutions protecting client web applications. You will monitor traffic, respond to incidents and collaborate across teams to strengthen security.

The role emphasizes Terraform-driven automation and ongoing policy development. You will help with change requests, problem resolution and security posture improvements, while mentoring junior engineers in incident handling and WAF operations within a hybrid client-facing

Qualifications

Bachelor’s degree preferred in CS/IT/Cybersecurity or related field.
3–5 years in web application security operations focusing on WAF management.
Hands-on experience with Cloudflare and Imperva required.
Proficiency with Terraform preferred for IaC workflows.
Strong understanding of web app protocols, security principles and best practices.
Familiarity with ITIL processes and ticketing systems for incident management.
Certifications (e.g., CISSP, Security+) are a plus.
Excellent analytical, problem-solving and communication skills.
Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

Configure, manage and optimize WAF solutions for web applications.
Provide ongoing operational coverage of web application firewalls.
Monitor application traffic and security events to identify threats.
Analyze security incidents, perform root cause analysis and remediation.
Collaborate with incident response teams to investigate and respond to incidents.
Develop and maintain WAF policies, rules and documentation.
Support security audits and assessments and ensure policy adherence.
Stay updated on threats, vulnerabilities and security technologies.
Utilize WAF solutions including Cloudflare and Imperva for implementation and management.
Leverage Terraform for IaC to automate deployment and management.
Mentor junior engineers on WAF management and incident response.