WAF Operations Engineer — Secure Web Apps & IaC

Ernst & Young Oman; Palo Alto (CA); Remote; USD 110,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to configure and operate web application firewalls and protect client applications from cyber threats. You will monitor traffic, respond to incidents, and collaborate with cross-functional teams to strengthen security controls.

This role leverages Cloudflare, Imperva, and Terraform to automate security deployments, while mentoring junior engineers and supporting audits.

Qualifications

• Bachelor’s degree in computer science, IT or cybersecurity preferred.
• 3–5 years of experience in web application security operations focusing on WAF management.
• Hands-on experience with Cloudflare and Imperva required.
• Terraform for infrastructure automation preferred.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions for web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats.
• Analyze security incidents and perform root-cause analysis.
• Collaborate with incident response teams to investigate incidents.
• Develop and maintain WAF policies, rules, and docs.
• Support security audits and assessments.
• Stay current with threats and security technologies.
• Use Cloudflare and Imperva for implementation and management.
• Leverage Terraform for IaC to deploy WAFs.
• Mentor junior engineers in WAF management and IR processes.

Skills

WAF management

Terraform

Cloudflare

Imperva

Incident response

Security monitoring

ITIL

Analytical thinking

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to configure and operate web application firewalls and protect client applications from cyber threats. You will monitor traffic, respond to incidents, and collaborate with cross-functional teams to strengthen security controls.

This role leverages Cloudflare, Imperva, and Terraform to automate security deployments, while mentoring junior engineers and supporting audits.