WAF Ops Engineer: Cloudflare/Imperva & IaC Automation

Ernst & Young Oman; Chattanooga (TN); Remote; USD 105,000 - 192,000; Full time

Job summary

EY seeks a WAF Operations Solution Engineer to implement and manage Web Application Firewalls for client applications. You will monitor traffic, analyze security events, and respond to incidents to protect web assets.

You will configure WAFs (Cloudflare, Imperva), automate with Terraform, and collaborate with cross-functional teams to strengthen security. This role offers growth in a global cybersecurity team and a flexible work environment.

Qualifications

• Bachelor’s degree or related field preferred.
• 3–5 years of experience in web application security operations with a focus on WAF management.
• Hands-on experience with WAF solutions like Cloudflare and Imperva is required.
• Terraform for infrastructure automation is preferred.
• Familiarity with ITIL processes and ticketing systems is beneficial.

Responsibilities

• Configure, manage, and optimize WAF solutions to secure web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Analyze security incidents and perform root-cause remediation.
• Collaborate with incident response teams to investigate security incidents.
• Develop and maintain WAF policies, rules, and documentation.
• Support security audits and assessments.
• Stay current with emerging threats and technologies to enhance security posture.
• Leverage Cloudflare and Imperva for implementation and management.
• Use Terraform for IaC to automate deployment of WAF solutions.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Incident response

Security analytics

Communication

Education

Bachelor’s degree in CS/IT/Cybersecurity

Certifications CISSP or Security+ (plus)

Tools

Cloudflare

Imperva

Terraform

Job description

EY seeks a WAF Operations Solution Engineer to implement and manage Web Application Firewalls for client applications. You will monitor traffic, analyze security events, and respond to incidents to protect web assets.

You will configure WAFs (Cloudflare, Imperva), automate with Terraform, and collaborate with cross-functional teams to strengthen security. This role offers growth in a global cybersecurity team and a flexible work environment.