WAF Operations Engineer — Secure Web Apps with IaC

EY; Wichita (KS); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation and benefits

Total Rewards package

401(k) and pension

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client environments. You will monitor traffic, respond to security events, and support incident resolution while aligning with EY security standards.

You will work across teams and use Cloudflare, Imperva, and Terraform to automate WAF deployments and protections, contributing to a stronger security posture in a fast-paced advisory environment.

Qualifications

• Bachelor’s degree or equivalent in computer science, IT, cybersecurity, or related field.
• 3–5 years of web application security operations experience with WAF management.
• Hands-on experience with Cloudflare and Imperva required.
• Terraform for infrastructure automation preferred.
• Familiarity with ITIL processes and incident management.

Responsibilities

• Configure, manage, and optimize WAF solutions for web applications.
• Provide ongoing operational coverage of WAFs and ensure performance.
• Monitor traffic and security events; analyze incidents and root causes.
• Collaborate with incident response for timely investigations.
• Develop WAF policies and documentation to align with best practices.

Skills

WAF management

Security operations

Incident response

Threat monitoring

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field

Tools

Cloudflare

Imperva

Terraform

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client environments. You will monitor traffic, respond to security events, and support incident resolution while aligning with EY security standards.

You will work across teams and use Cloudflare, Imperva, and Terraform to automate WAF deployments and protections, contributing to a stronger security posture in a fast-paced advisory environment.