WAF Operations Engineer — Cloudflare/Imperva & IaC

EY; Irvine (CA); Hybrid; USD 82,000 - 154,600; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plans

Flexible vacation policy

Hybrid work model

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications. You will monitor traffic, analyze events, and respond to incidents while collaborating with cross-functional teams to strengthen overall security posture.

The role emphasizes hands-on WAF expertise with Cloudflare and Imperva, plus Terraform-based IaC for automated deployment, in a hybrid EY environment that values ongoing learning and strong teamwork.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related field preferred.
• 1–2 years of experience in web application security operations focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva required.
• Proficiency with Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and ticketing systems.

Responsibilities

• Configure and optimize WAF solutions to implement effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls and ensure proper function.
• Monitor application traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents, perform root-cause analysis, and remediation.
• Collaborate with incident response teams to investigate and respond to security incidents.
• Develop and maintain WAF policies, rules, and documentation in line with best practices and compliance.

Skills

Web security operations

WAF management

Incident analysis

Communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications. You will monitor traffic, analyze events, and respond to incidents while collaborating with cross-functional teams to strengthen overall security posture.

The role emphasizes hands-on WAF expertise with Cloudflare and Imperva, plus Terraform-based IaC for automated deployment, in a hybrid EY environment that values ongoing learning and strong teamwork.