WAF Operations Engineer – Secure Web Apps & Terraform

EY; Pittsburgh (Allegheny County); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, protecting client applications from cyber threats. You will monitor traffic, respond to incidents, and implement security automation using Cloudflare, Imperva, and Terraform.

You will work within a cybersecurity team, collaborate with incident response, and help maintain compliance through documented policies and ongoing vulnerability analysis across multiple client environments.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, or related field preferred.
• 3–5 years of experience in web application security operations, focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva is required.
• Proficiency with Terraform for infrastructure automation is preferred.

Responsibilities

• Configure, manage, and optimize WAF solutions to establish security controls for web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats and vulnerabilities.
• Analyze security incidents, perform root cause analysis, and drive remediation.
• Collaborate with incident response teams to investigate and respond to incidents.

Skills

WAF operations

Incident response

Security monitoring

Analytical thinking

Independent & collaborative

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Terraform

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to configure and manage web application firewalls, protecting client applications from cyber threats. You will monitor traffic, respond to incidents, and implement security automation using Cloudflare, Imperva, and Terraform.

You will work within a cybersecurity team, collaborate with incident response, and help maintain compliance through documented policies and ongoing vulnerability analysis across multiple client environments.