WAF Operations Engineer — Cloudflare/Imperva & IaC

EY; Denver (CO); On-site; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) and pension plan

Paid time off

Job summary

EY seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls across client apps. You will monitor traffic, analyze security events, and respond to incidents to mitigate risks, while collaborating with cross-functional teams to strengthen security posture.

You’ll work with Cloudflare and Imperva, leverage Terraform for IaC, and mentor junior engineers to elevate incident response practices in a fast-paced environment.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• 3–5 years of experience in web application security operations with WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation is preferred.
• Strong understanding of web application protocols, security principles, and ITIL-aligned incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide operational coverage of web application firewalls and monitor traffic.
• Analyze security events, conduct root cause analysis, and implement remediations.
• Collaborate with incident response teams to investigate security incidents.
• Develop WAF policies, rules, and documentation aligned with best practices.
• Support security audits and promote adherence to security standards.
• Stay updated on emerging threats and technologies to enhance security posture.
• Utilize WAF solutions including Cloudflare and Imperva and Terraform IaC for deployments.
• Mentor junior engineers on WAF management and incident response processes.

Skills

WAF management

Cybersecurity operations

Incident response

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY seeks a WAF Operations Solution Engineer to configure and maintain web application firewalls across client apps. You will monitor traffic, analyze security events, and respond to incidents to mitigate risks, while collaborating with cross-functional teams to strengthen security posture.

You’ll work with Cloudflare and Imperva, leverage Terraform for IaC, and mentor junior engineers to elevate incident response practices in a fast-paced environment.