WAF Operations Engineer - Terraform/IaC (Cloudflare/Imperva)

EY; Woodbridge Township (NJ); Hybrid; USD 82,500 - 136,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is looking for a WAF Operations Solution Engineer to configure and support web application firewalls protecting client apps. You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to strengthen security posture.

You will leverage Cloudflare and Imperva WAFs, with Terraform IaC to automate deployments, report on security gaps, and assist with change requests in a fast-paced environment.

Qualifications

• Bachelor's degree preferred in CS/IT/Cybersecurity.
• 1-2 years in web app security operations focused on WAF.
• Hands-on with Cloudflare and Imperva WAFs.
• Terraform for infrastructure automation preferred.
• Familiar with ITIL processes and incident management.
• Certifications such as CISSP or Security+ are pluses.
• Analytical, problem-solving and strong communication skills.
• Able to work independently in a fast-paced environment.

Responsibilities

• Configure and optimize WAF solutions for web apps.
• Provide ongoing operational coverage of web app firewalls.
• Monitor application traffic and security events.
• Analyze security incidents with root-cause analysis.
• Collaborate with incident response teams to remediate.
• Develop and maintain WAF policies, rules, and docs.
• Support security audits and assessments.
• Stay current with threats and technologies to enhance security posture.
• Use Cloudflare, Imperva, and other WAFs for implementation and management.
• Leverage Terraform IaC to automate deployments.

Skills

WAF management

Security monitoring

Incident response

Terraform

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Cloudflare

Imperva

Terraform

Job description

EY is looking for a WAF Operations Solution Engineer to configure and support web application firewalls protecting client apps. You will monitor traffic, analyze security events, respond to incidents, and collaborate with cross-functional teams to strengthen security posture.

You will leverage Cloudflare and Imperva WAFs, with Terraform IaC to automate deployments, report on security gaps, and assist with change requests in a fast-paced environment.