WAF Operations Engineer — Cloudflare/Imperva, IaC

EY; Pittsburgh (Allegheny County); On-site; USD 104,800 - 192,200; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Hybrid work model

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications from cyber threats. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to improve security posture.

You will work with Cloudflare and Imperva, using Terraform for IaC, and participate in security audits. The role requires 3–5 years in web app security ops, a relevant degree, and strong

Qualifications

• 3–5 years of experience in web application security operations focused on WAF management.
• Hands-on with WAFs such as Cloudflare and Imperva is required.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Certs (CISSP/Security+) are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams to respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and stay current with threats and technologies.
• Utilize WAF solutions (Cloudflare/Imperva) and Terraform for IaC.

Skills

WAF management

Incident response

Security governance

Analytical thinking

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications from cyber threats. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to improve security posture.

You will work with Cloudflare and Imperva, using Terraform for IaC, and participate in security audits. The role requires 3–5 years in web app security ops, a relevant degree, and strong