Cyber SDC - WAF Operations Solution Engineer- Staff

About the role

As a WAF Operations Solution Engineer, you will be responsible for implementing and managing Web Application Firewall (WAF) solutions to protect client applications from cyber threats. You will work within a team of cybersecurity professionals to establish effective security measures that safeguard web applications and data.

Responsibilities

• Configure and optimize WAF solutions to establish effective security controls for web applications.
• Provide ongoing operational coverage of web application firewalls, ensuring they function correctly and efficiently.
• Monitor application traffic and security events to identify potential threats and vulnerabilities.
• Conduct thorough analysis of security incidents, including root cause analysis and remediation efforts.
• Collaborate with incident response teams to investigate and respond to security incidents in a timely manner.
• Develop and maintain WAF policies, rules, and documentation to align with best practices and compliance requirements.
• Provide support for security audits and assessments, promoting adherence to security standards and policies.
• Stay current with emerging threats, vulnerabilities, and security technologies to enhance the organization's security posture.
• Utilize various WAF solutions, including Cloudflare and Imperva, for implementation and management, ensuring optimal configuration and performance.
• Leverage Terraform for infrastructure as code (IaC) to automate the deployment and management of WAF solutions.

Qualifications

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field preferred.
• 1-2 years of experience in web application security operations, with a focus on WAF management.
• Hands-on experience with WAF solutions such as Cloudflare and Imperva is required.
• Proficiency in using Terraform for infrastructure automation is preferred.
• Strong understanding of web application protocols, security principles, and best practices.
• Familiarity with ITIL processes and ticketing systems for incident management.
• Relevant certifications (e.g., CISSP, Security+) are a plus.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Pay

• Base salary range for all geographic locations in the US: $82,500 to $136,000.
• Base salary range for New York City Metro Area, Washington State and California (excluding Sacramento): $99,100 to $154,600.
• Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.

Benefits

• Medical and dental coverage.
• Pension and 401(k) plans.
• Wide range of paid time off options.
• Flexible vacation policy – you decide how much vacation time you need based on your personal circumstances.
• Time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

Schedule

Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.