WAF Operations Engineer — Cloudflare/Imperva (Remote)

EY; Indianapolis (IN); On-site; USD 82,500 - 136,000; Full time

Job summary

EY seeks a WAF Operations Solution Engineer to configure and manage web application firewalls, ensuring protection for client web apps and data. You’ll monitor traffic, analyze security events, and respond to incidents, collaborating with cross-functional teams to enhance security postures.

You will implement and optimize WAF policies across Cloudflare and Imperva, leverage Terraform for IaC, and participate in security audits and change requests while staying ahead of emerging threats.

Qualifications

• 1–2 years of experience in web application security operations with WAF management.
• Hands-on experience with Cloudflare and Imperva.
• Terraform for infrastructure automation preferred.
• Bachelor's degree in computer science, information technology, cybersecurity, or a related field preferred.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats and vulnerabilities.
• Conduct root cause analysis and remediation of security incidents.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments to ensure compliance.
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Utilize Cloudflare and Imperva for implementation and management of WAF solutions; apply Terraform IaC.

Skills

Analytical skills

Problem solving

Communication skills

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY seeks a WAF Operations Solution Engineer to configure and manage web application firewalls, ensuring protection for client web apps and data. You’ll monitor traffic, analyze security events, and respond to incidents, collaborating with cross-functional teams to enhance security postures.

You will implement and optimize WAF policies across Cloudflare and Imperva, leverage Terraform for IaC, and participate in security audits and change requests while staying ahead of emerging threats.