Data Security Engineer II

Nykaa is looking for a Security Engineer II to strengthen our enterprise security operations and infrastructure protection capabilities. The role involves hands-on ownership of security controls across network, web, endpoint, cloud, and zero-trust environments.

Responsibilities:

• Configure, administer, and troubleshoot SWG, CASB, DLP & ZTNA solutions such as Netskope and Zscaler.
• Manage and tune FortiGate firewalls, including policies, objects, NAT, VPNs, and security monitoring.
• Operate and enhance Akamai WAF, including rule tuning, exception handling, and incident investigation.
• Deploy, manage, and investigate alerts from EDR/XDR platforms such as Palo Alto Cortex XDR or CrowdStrike.
• Monitor security events, perform RCA, and support incident response and remediation.
• Work closely with infrastructure, application, and cloud teams to implement secure architectures.
• Support vulnerability remediation, security control reviews, change management, and documentation.

Requirements:

• 5-6 years of hands-on experience in information security, network security, or security operations.
• Strong hands-on experience with Netskope/Zscaler covering SWG, CASB, DLP, and ZTNA.
• Experience with FortiGate Firewall, Akamai WAF, and at least one EDR/XDR platform.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, routing, VPNs, and proxies.
• Good knowledge of AWS security fundamentals, including IAM, VPC, security groups, logging, and monitoring.
• Strong troubleshooting, analytical, and incident-handling skills.
• Good to Have: CCNP, CCIE, CCSP.