WAF Operations Engineer — Cloudflare/Imperva & Terraform

EY; Chantilly (VA); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Hybrid model

Flexible vacation policy

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, monitor traffic, and respond to security incidents for client applications. You will work with diverse cybersecurity teams to maintain security posture and automate protections using WAF solutions.

The role emphasizes collaboration, incident analysis, policy development, and supporting audits, with hands-on experience in Cloudflare and Imperva and IaC with Terraform.

Qualifications

• Bachelor’s degree in computer science or related field preferred.
• 3–5 years in web app security operations focusing on WAF.
• Hands-on with Cloudflare and Imperva required.
• Familiarity with ITIL processes and ticketing systems.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions for web apps.
• Provide ongoing operational coverage for firewalls and security events.
• Monitor traffic, analyze incidents, and perform root cause analysis.
• Collaborate with incident response teams to remediate threats.
• Develop WAF policies and documentation aligned with best practices.
• Support security audits and assessments and stay current on threats.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

ITIL processes

Security incident analysis

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, monitor traffic, and respond to security incidents for client applications. You will work with diverse cybersecurity teams to maintain security posture and automate protections using WAF solutions.

The role emphasizes collaboration, incident analysis, policy development, and supporting audits, with hands-on experience in Cloudflare and Imperva and IaC with Terraform.