WAF Operations Engineer — Secure Web Apps & Incidents

EY; Toledo (OH); On-site; USD 104,800 - 192,200; Full time

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, protecting client applications from cyber threats. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen security postures.

Experience with Cloudflare, Imperva, and Terraform is required or preferred. This role offers opportunities to mentor junior engineers and contribute to security audits, policy development,

Qualifications

• 3–5 years of experience in web application security operations.
• Hands-on experience with Cloudflare and Imperva WAFs.
• Experience using Terraform for infrastructure automation is preferred.

Responsibilities

• Configure and manage WAF solutions to protect web applications.
• Provide ongoing operational coverage of WAFs and ensure performance.
• Monitor traffic and security events to identify threats.
• Analyze incidents and perform root-cause remediation.
• Collaborate with incident response teams to investigate incidents.
• Develop WAF policies, rules, and documentation.
• Support security audits and assessments.
• Stay updated on threats and security technologies.
• Utilize Cloudflare and Imperva for deployment and management.
• Leverage Terraform for IaC to deploy WAFs.
• Mentor junior engineers on WAF management and incident response.

Skills

Web application security

Incident response

Communication skills

Education

Bachelor’s degree in Computer Science or related field

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, protecting client applications from cyber threats. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to strengthen security postures.

Experience with Cloudflare, Imperva, and Terraform is required or preferred. This role offers opportunities to mentor junior engineers and contribute to security audits, policy development,