WAF Operations Engineer — Secure Web Apps via IaC

Ernst & Young Oman; New Brunswick (NJ); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to implement and manage web application firewall solutions, protecting client applications from cyber threats. You will monitor traffic, analyze security events, and respond to incidents, collaborating with cross-functional teams.

Experience with Cloudflare, Imperva, and Terraform is required in a hybrid US environment. The role emphasizes operational coverage, change management, and continuous improvement of security postures

Qualifications

• 3–5 years of experience in web application security operations.
• Hands-on experience with Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation.
• Familiarity with ITIL processes and incident management.
• Relevant certifications (e.g., CISSP, Security+).

Responsibilities

• Configure, manage, and optimize WAF solutions.
• Provide ongoing operational coverage of WAFs.
• Monitor traffic and security events to identify threats.
• Analyze security incidents and perform root-cause analysis.
• Collaborate with incident response teams to mitigate incidents.

Skills

WAF management

Cloudflare

Imperva

Terraform

Incident response

ITIL processes

Security certifications

Analytical skills

Communication skills

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

Ernst & Young LLP is seeking a WAF Operations Solution Engineer to implement and manage web application firewall solutions, protecting client applications from cyber threats. You will monitor traffic, analyze security events, and respond to incidents, collaborating with cross-functional teams.

Experience with Cloudflare, Imperva, and Terraform is required in a hybrid US environment. The role emphasizes operational coverage, change management, and continuous improvement of security postures