WAF Operations Engineer - Cloudflare/Imperva | IaC Automation

EY; Detroit (MI); Hybrid; USD 82,500 - 136,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off

Hybrid work model

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage Web Application Firewall solutions, protect client web applications, and monitor security events. You will support incident response, perform root cause analyses, and collaborate with cross-functional teams to enhance security postures.

The role requires hands-on WAF experience (Cloudflare, Imperva) and Terraform for IaC. A bachelor's degree in a related field is preferred, with 1–2 years of security operations experience.

Qualifications

• 1-2 years of experience in web application security operations or related field.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.

Skills

Security operations

Incident response

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and manage Web Application Firewall solutions, protect client web applications, and monitor security events. You will support incident response, perform root cause analyses, and collaborate with cross-functional teams to enhance security postures.

The role requires hands-on WAF experience (Cloudflare, Imperva) and Terraform for IaC. A bachelor's degree in a related field is preferred, with 1–2 years of security operations experience.