WAF Operations Engineer: Secure Web Apps & IaC

EY; New York (NY); Remote; USD 126,000 - 219,000; Full time

Benefits offered by this job

Hybrid model

Paid time off policy

Total rewards package (medical, dental

401(k) plans

Job summary

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will configure WAFs, monitor traffic and security events, and collaborate with incident response teams to mitigate risks while aligning with security best practices.

You will leverage Cloudflare and Imperva, automate deployments with Terraform, and mentor junior engineers in WAF management and incident response processes.

Qualifications

• Bachelor’s degree or related field preferred.
• 3–5 years of experience in web application security operations focusing on WAF management.
• Hands-on experience with WAFs such as Cloudflare and Imperva.

Responsibilities

• Configure, manage, and optimize WAF solutions for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents and perform remediation efforts.
• Collaborate with incident response teams to investigate and respond to incidents.
• Develop and maintain WAF policies, rules, and documentation.

Skills

WAF management

Terraform

Cloudflare

Imperva

Incident response

Security principles

Education

Bachelor’s degree in CS/IT/Cybersecurity

Job description

EY is seeking a WAF Operations Solution Engineer to implement and manage Web Application Firewall solutions, protecting client applications from cyber threats. You will configure WAFs, monitor traffic and security events, and collaborate with incident response teams to mitigate risks while aligning with security best practices.

You will leverage Cloudflare and Imperva, automate deployments with Terraform, and mentor junior engineers in WAF management and incident response processes.