WAF Operations Engineer — Secure Web Apps (Hybrid)

EY; Providence (RI); Hybrid; USD 82,500 - 136,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY seeks a WAF Operations Solution Engineer to configure and operate web application firewalls, ensuring robust security and performance for client applications. You will monitor traffic, analyze security events, respond to incidents, and help improve overall security posture.

You will develop and maintain WAF policies and collaborate with cross-functional teams to implement automation using Terraform and popular WAFs such as Cloudflare and Imperva.

Qualifications

• Bachelor's degree or higher in CS/IT/Cybersecurity or related field.
• Experience in web application security operations and WAF management.
• Hands-on with Cloudflare and Imperva WAFs; Terraform automation preferred.
• Strong knowledge of web application protocols and security best practices.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify threats and vulnerabilities.
• Conduct root-cause analysis and remediation for security incidents.
• Collaborate with incident response teams to investigate and respond to security incidents promptly.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance.
• Support security audits and assessments; uphold security standards and policies.
• Stay current with emerging threats and technologies to enhance security posture.
• Leverage WAF solutions (Cloudflare, Imperva) and Terraform for IaC-driven deployment and management.

Skills

WAF management

Incident response coordination

Security engineering

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field

Tools

Cloudflare

Imperva

Terraform

Job description

EY seeks a WAF Operations Solution Engineer to configure and operate web application firewalls, ensuring robust security and performance for client applications. You will monitor traffic, analyze security events, respond to incidents, and help improve overall security posture.

You will develop and maintain WAF policies and collaborate with cross-functional teams to implement automation using Terraform and popular WAFs such as Cloudflare and Imperva.