WAF Operations Engineer — Terraform + Cloudflare/Imperva

EY; Toledo (OH); Hybrid; USD 82,500 - 154,600; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications. You will monitor traffic, analyze security events, and respond to incidents to safeguard critical assets.

In this role, you will implement WAF policies, support audits, and collaborate across teams to improve security posture using Cloudflare, Imperva, and Terraform within a hybrid EY environment.

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related field.
• 1–2 years of experience in web app security operations focusing on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva.
• Proficiency with Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and ticketing systems.
• Certifications such as CISSP or Security+ are a plus.

Responsibilities

• Configure and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events for threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams to mitigate incidents.
• Develop WAF policies and documentation to align with standards.
• Support security audits and assessments.
• Stay current with emerging threats and security technologies.

Skills

WAF management

Incident response

Security operations

Terraform usage

Cloudflare/Imperva

Education

Bachelor's degree in CS/IT/Cybersecurity or related

Tools

Terraform

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls for client applications. You will monitor traffic, analyze security events, and respond to incidents to safeguard critical assets.

In this role, you will implement WAF policies, support audits, and collaborate across teams to improve security posture using Cloudflare, Imperva, and Terraform within a hybrid EY environment.