WAF Operations Engineer - Safeguard Web Apps

EY; Las Vegas (NV); Hybrid; USD 82,500 - 154,600; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic and security events, and respond to incidents across client applications. The role emphasizes automation with Terraform and collaboration with cross-functional teams to improve security posture.

You will contribute to change requests, support problem resolution, and stay current with threat landscapes while delivering secure, compliant web application protections.

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity, or related field.
• 1–2 years experience in web application security operations with focus on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.

Skills

WAF management

Incident response

Security concepts

ITIL familiarity

Team collaboration

Education

Bachelor's degree in computer science / IT / Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, monitor traffic and security events, and respond to incidents across client applications. The role emphasizes automation with Terraform and collaboration with cross-functional teams to improve security posture.

You will contribute to change requests, support problem resolution, and stay current with threat landscapes while delivering secure, compliant web application protections.