WAF Operations Engineer — Cloudflare/Imperva & IaC Expert

Ernst & Young Oman; Huntsville (AL); On-site; USD 105,000 - 192,000; Full time

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage web application firewall solutions, protecting client applications from cyber threats. You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to improve security posture.

You will configure and maintain WAF policies, support change requests, and contribute to audits while leveraging Cloudflare, Imperva, and Terraform to automate and optimize security measures.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity or related field preferred.
• 3-5 years of web application security operations experience, focused on WAF management.
• Hands-on experience with WAFs such as Cloudflare and Imperva is required.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls and monitoring.
• Analyze security events, identify threats, and respond to incidents.
• Collaborate with incident response teams on investigations and remediation.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments and stay updated on threats and technologies.
• Leverage WAF solutions including Cloudflare and Imperva; use Terraform for IaC.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Web security operations

Incident response

Security principles

Education

Bachelor’s degree in computer science, Information Technology, Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage web application firewall solutions, protecting client applications from cyber threats. You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to improve security posture.

You will configure and maintain WAF policies, support change requests, and contribute to audits while leveraging Cloudflare, Imperva, and Terraform to automate and optimize security measures.