WAF Operations Engineer — Cloudflare/Imperva & Terraform

Ernst & Young Oman; Minneapolis (MN); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation and benefits

Professional development and mentoring

Job summary

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to configure and operate web application firewalls, monitor traffic, analyze security events, and respond to incidents to protect client applications. In this hybrid role, you will collaborate with cybersecurity teams, implement changes, develop WAF policies, and support audits to uphold security standards.

You’ll work with Cloudflare and Imperva, leverage Terraform for IaC, mentor junior engineers, and contribute to EY’s trusted

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 3–5 years in web application security operations focusing on WAFs.
• Hands-on with Cloudflare and Imperva WAFs.
• Familiarity with ITIL incident management and security best practices.

Responsibilities

• Configure, manage, and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Analyze security incidents and perform root-cause analysis and remediation.
• Collaborate with incident response teams on timely investigations.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and adherence to standards.
• Stay updated on threats and evolving technologies.
• Use Cloudflare/Imperva for implementation and management.
• Leverage Terraform for IaC to automate deployment of WAFs.
• Mentor junior engineers on WAF management and response.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

ITIL

Security certifications

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to configure and operate web application firewalls, monitor traffic, analyze security events, and respond to incidents to protect client applications. In this hybrid role, you will collaborate with cybersecurity teams, implement changes, develop WAF policies, and support audits to uphold security standards.

You’ll work with Cloudflare and Imperva, leverage Terraform for IaC, mentor junior engineers, and contribute to EY’s trusted