WAF Operations Engineer: Secure Web Apps with Terraform

EY; Chattanooga (TN); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k)

Paid time off options

Hybrid work model

Job summary

EY is hiring a WAF Operations Solution Engineer to configure and monitor web application firewalls for client security. You’ll implement changes, resolve incidents, and automate security measures using Terraform and top WAFs like Cloudflare and Imperva.

You will work with cross‑functional teams to strengthen security postures, participate in audits, and mentor junior engineers in incident response practices. EY supports a hybrid model and ongoing professional development.

Qualifications

• WAF management experience required.
• Hands-on with Cloudflare and Imperva.
• Terraform for infrastructure automation preferred.
• Familiar with ITIL incident management processes.
• Certs such as CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions for secure web apps.
• Provide ongoing operational coverage of web application firewalls.
• Monitor traffic and security events to identify threats.
• Analyze incidents and perform root-cause remediation.
• Collaborate with incident response on timely investigations.
• Develop and maintain WAF policies, rules, and docs.
• Support security audits and assessments.
• Stay updated on threats and technologies to strengthen posture.
• Utilize WAFs including Cloudflare and Imperva; use Terraform for IaC.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Incident response

Security best practices

Communication

Independent work

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is hiring a WAF Operations Solution Engineer to configure and monitor web application firewalls for client security. You’ll implement changes, resolve incidents, and automate security measures using Terraform and top WAFs like Cloudflare and Imperva.

You will work with cross‑functional teams to strengthen security postures, participate in audits, and mentor junior engineers in incident response practices. EY supports a hybrid model and ongoing professional development.