WAF Operations Engineer - Secure Web Apps & Automation

EY; Birmingham (AL); Hybrid; USD 82,500 - 136,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications. You will monitor traffic, respond to incidents, and work with cross-functional teams to enhance security posture.

You will leverage Cloudflare and Imperva, develop WAF policies, and use Terraform IaC to automate deployments, while supporting audits and security best practices.

Qualifications

• 1–2 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Terraform for infrastructure automation is preferred.
• Strong understanding of web application protocols, security principles, and ITIL processes.

Responsibilities

• Configure and optimize WAF solutions to establish security controls for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents, perform root-cause analysis, and drive remediation.

Skills

Web security operations

Incident response

Security incident analysis

Communication skills

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications. You will monitor traffic, respond to incidents, and work with cross-functional teams to enhance security posture.

You will leverage Cloudflare and Imperva, develop WAF policies, and use Terraform IaC to automate deployments, while supporting audits and security best practices.