WAF Operations Engineer: Secure Web Apps & IaC

EY

Chicago (IL)

On-site

USD 82,500 - 136,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Hybrid/Remote work options

Total Rewards package

Medical and dental coverage

401(k) and pension plans

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, ensuring secure and high-performing client applications. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen security posture.

The role requires 1–2 years in web app security, hands-on WAF experience (Cloudflare/Imperva), and familiarity with Terraform for IaC.

Qualifications

Bachelor's degree in CS/IT/Cybersecurity or related field.
1–2 years of experience in web application security operations focusing on WAF management.
Hands-on experience with Cloudflare and Imperva WAFs.
Terraform for infrastructure automation is preferred.
Knowledge of ITIL processes and incident management.

Responsibilities

Configure and optimize WAF solutions to enforce security controls for web applications.
Provide ongoing operational coverage for web application firewalls.
Monitor application traffic and security events to identify threats.
Analyze security incidents and perform root-cause remediation.
Collaborate with incident response teams to investigate incidents in a timely manner.
Develop and maintain WAF policies and documentation.
Support security audits and compliance efforts.
Stay current with emerging threats and technologies to enhance security posture.
Utilize Cloudflare and Imperva for deployment and management; leverage Terraform for IaC.