WAF Operations Engineer: Secure Web Apps & Automation

EY; Austin (TX); On-site; USD 104,800 - 192,200; Full time

Benefits offered by this job

Health benefits

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client apps from cyber threats. You’ll monitor traffic, analyze security events, respond to incidents, and collaborate across teams to improve security posture.

Ideal candidates have 3–5 years in web app security operations, hands-on WAF experience with Cloudflare and Imperva, and proficiency in Terraform for IaC. EY offers a hybrid work model and strong professional development.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity, or related field preferred.
• 3–5 years of experience in web application security operations focused on WAF management.
• Hands-on experience with Cloudflare and Imperva required.
• Terraform proficiency for infrastructure automation preferred.
• Strong understanding of web application protocols, security principles, and best practices.
• Familiarity with ITIL processes and incident management systems.
• Certifications such as CISSP or Security+ are plus.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and with teams in a fast-paced environment.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage and ensure WAFs function correctly.
• Monitor application traffic and security events to detect threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams to investigate incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments ensuring policy compliance.
• Stay updated on threats and technologies to improve security posture.
• Leverage WAF tools like Cloudflare and Imperva; use Terraform for IaC.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Terraform

Cloudflare

Imperva

ITIL

Incident response

Security concepts

Analytical skills

Communication

Education

Bachelor's degree in computer science, IT, cybersecurity

Tools

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client apps from cyber threats. You’ll monitor traffic, analyze security events, respond to incidents, and collaborate across teams to improve security posture.

Ideal candidates have 3–5 years in web app security operations, hands-on WAF experience with Cloudflare and Imperva, and proficiency in Terraform for IaC. EY offers a hybrid work model and strong professional development.