WAF Operations Engineer: Secure Web Apps & IaC

EY; New Brunswick (NJ); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Medical and dental coverage

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, protecting client applications from cyber threats. You’ll monitor traffic, respond to incidents, and collaborate with security teams to maintain secure, high-performing web services.

This role uses Cloudflare and Imperva with Terraform IaC; you’ll mentor engineers and help drive security improvements across engagements in a hybrid, client-facing environment.

Qualifications

• 3-5 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Strong knowledge of web application protocols and security best practices.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Relevant certifications (e.g., CISSP, Security+).
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Responsibilities

• Configure, manage, and optimize WAF solutions for web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats.
• Conduct root-cause analysis of security incidents.
• Collaborate with incident response teams to handle incidents.
• Develop and maintain WAF policies and documentation.
• Support security audits and assessments.
• Stay current with threats and security technologies.
• Utilize Cloudflare and Imperva for deployment and management.
• Leverage Terraform IaC for WAF deployment.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Incident response

Security events analysis

Security concepts

Communication skills

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, protecting client applications from cyber threats. You’ll monitor traffic, respond to incidents, and collaborate with security teams to maintain secure, high-performing web services.

This role uses Cloudflare and Imperva with Terraform IaC; you’ll mentor engineers and help drive security improvements across engagements in a hybrid, client-facing environment.