WAF Operations Engineer: Cloudflare/Imperva + Terraform

EY; Boston (MA); On-site; USD 83,000 - 136,000; Full time

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic, analyze security events and respond to incidents for client apps. You will work with Cloudflare and Imperva, using Terraform to automate deployments and enhance security postures.

The role emphasizes collaboration with cross-functional teams and staying ahead of evolving threats, with an opportunity to influence security controls and policy development across projects.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity or related field.
• 1-2 years of web application security operations with a focus on WAF management.
• Hands-on experience with WAFs such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Strong understanding of web application protocols and security best practices.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Relevant certifications (e.g., CISSP, Security+) are a plus.
• Excellent analytical, problem-solving and communication skills.

Responsibilities

• Configure and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams to investigate security incidents.
• Develop and maintain WAF policies, rules, and docs.
• Support security audits and assessments to meet standards.
• Stay current with emerging threats and security technologies.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

Education

Bachelors degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic, analyze security events and respond to incidents for client apps. You will work with Cloudflare and Imperva, using Terraform to automate deployments and enhance security postures.

The role emphasizes collaboration with cross-functional teams and staying ahead of evolving threats, with an opportunity to influence security controls and policy development across projects.