WAF Operations Engineer – IaC & Cloudflare/Imperva

EY; Grand Rapids (MI); Hybrid; USD 82,500 - 154,600; Full time

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and monitor web application firewalls, ensuring secure and reliable client applications. You will analyze security events, support change requests, and collaborate with incident response teams to uphold the integrity of web apps.

You will leverage Cloudflare and Imperva WAFs, apply Terraform for IaC, and work within EY's hybrid work model to advance cybersecurity practices across client environments.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 1–2 years WAF/security operations experience.
• Hands-on with Cloudflare and Imperva WAFs.
• Terraform for IaC experience preferred.
• Strong knowledge of web protocols and security concepts.
• Familiarity with ITIL and incident management processes.

Responsibilities

• Configure and optimize WAFs to protect web apps.
• Provide operational coverage for WAFs and ensure performance.
• Monitor traffic and security events for threats.
• Analyze security incidents and perform root-cause analyses.
• Collaborate with incident response teams to mitigate incidents.
• Develop and maintain WAF policies, rules, and docs.
• Support security audits and compliance activities.
• Stay updated on threats and security technologies.
• Use Terraform for IaC to automate deployments.

Skills

WAF operations

Incident response

Analytical thinking

Communication skills

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and monitor web application firewalls, ensuring secure and reliable client applications. You will analyze security events, support change requests, and collaborate with incident response teams to uphold the integrity of web apps.

You will leverage Cloudflare and Imperva WAFs, apply Terraform for IaC, and work within EY's hybrid work model to advance cybersecurity practices across client environments.