WAF Operations Engineer — Cloudflare & Imperva, IaC

EY; Stamford (CT); On-site; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards package

Generous vacation policy

Job summary

Ernst & Young LLP (EY) is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions for client applications, monitor traffic, analyze security events, handle incidents, and collaborate with cross-functional teams to strengthen security.

You’ll use Cloudflare and Imperva, automate with Terraform, and mentor junior engineers while supporting audits and compliance in EY's global security program.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field preferred.
• 3–5 years of web application security operations, with a focus on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.
• Provide support for security audits and assessments, promoting adherence to security standards and policies.
• Stay current with emerging threats, vulnerabilities, and security technologies to enhance the organization's security posture.
• Utilize various WAF solutions, including Cloudflare and Imperva, for implementation and management, ensuring optimal configuration and performance.
• Leverage Terraform for infrastructure as code (IaC) to automate the deployment and management of WAF solutions.
• Mentor junior engineers and provide guidance on WAF management and incident response processes.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

Security analysis

Communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Terraform

Cloudflare

Imperva

Job description

Ernst & Young LLP (EY) is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions for client applications, monitor traffic, analyze security events, handle incidents, and collaborate with cross-functional teams to strengthen security.

You’ll use Cloudflare and Imperva, automate with Terraform, and mentor junior engineers while supporting audits and compliance in EY's global security program.