WAF Operations Engineer — Secure Web Apps (Hybrid)

Ernst & Young Oman; Harrisburg (Dauphin County); Remote; USD 105,000 - 219,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Comprehensive compensation & benefits

Job summary

EY is seeking a WAF Operations Solution Engineer to configure, monitor, and optimize web application firewalls for clients across the US. You will lead incident response, analyze threats, and automate security controls using Terraform and major WAF platforms.

You will collaborate with cross-functional teams to strengthen security posture, maintain compliance, and mentor junior engineers in incident handling and WAF management.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• 3-5 years of experience in web application security operations with focus on WAF management.
• Hands-on experience with Cloudflare and Imperva is required.
• Terraform for infrastructure automation is preferred.
• Strong understanding of web app security principles and protocols.
• Familiarity with ITIL processes and ticketing systems.
• Certifications such as CISSP or Security+ are a plus.
• Excellent analytical, problem-solving, and communication skills.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats.
• Analyze security incidents and perform root-cause remediation.
• Coordinate with incident response teams to handle incidents.
• Develop WAF policies, rules, and documentation.
• Support security audits and assessments to ensure compliance.
• Stay updated on emerging threats and technologies.
• Utilize Cloudflare and Imperva for implementation and management.
• Leverage Terraform for IaC to automate deployment of WAFs.
• Mentor junior engineers on WAF management and response processes.

Skills

WAF operations

Incident response

Security incident analysis

Analytical thinking

Communication skills

Independent & collaborative work

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure, monitor, and optimize web application firewalls for clients across the US. You will lead incident response, analyze threats, and automate security controls using Terraform and major WAF platforms.

You will collaborate with cross-functional teams to strengthen security posture, maintain compliance, and mentor junior engineers in incident handling and WAF management.