WAF Operations Engineer — Secure Web Apps at Scale

EY; Secaucus (NJ); On-site; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions for client applications. You will monitor traffic, analyze security events, and respond to incidents to protect assets in a fast-paced environment.

You will work with Cloudflare and Imperva, use Terraform for IaC, and mentor junior engineers while aligning with ITIL processes and security best practices across diverse teams.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field preferred.
• 3–5 years of experience in web application security operations with a focus on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and incident management is a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.
• Provide support for security audits and assessments, promoting adherence to security standards and policies.
• Stay current with emerging threats, vulnerabilities, and security technologies to enhance the organization's security posture.
• Utilize various WAF solutions, including Cloudflare and Imperva, for implementation and management, ensuring optimal configuration and performance.
• Leverage Terraform for infrastructure as code (IaC) to automate the deployment and management of WAF solutions.
• Mentor junior engineers and provide guidance on WAF management and incident response processes.

Skills

Analytical skills

Problem-solving

Communication skills

Education

Bachelor’s degree in CS/IT/Cybersecurity

Certifications CISSP, Security+

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions for client applications. You will monitor traffic, analyze security events, and respond to incidents to protect assets in a fast-paced environment.

You will work with Cloudflare and Imperva, use Terraform for IaC, and mentor junior engineers while aligning with ITIL processes and security best practices across diverse teams.