Lead Security Engineer - Secure Web Gateway

Job Requirements

Lead Network Security Engineer (Secure Web Gateway – SWG) Location: Navi Mumbai/Chennai/Bengaluru/Hyderabad Experience: 10+ years Employment Type: Full-time

Role Overview We are looking for a

Senior Network Security Engineer – Secure Web Gateway (SWG) to manage and optimize

enterprise internet access security for users and endpoints in a regulated banking environment. This role focuses on

secure web access, content inspection, threat protection, and data controls , while collaborating with teams managing

firewalls, ZTNA, and Web/API Protection .

Key Responsibilities Primary Focus – Secure Web Gateway

• Design, configure, and operate Secure Web Gateway (SWG) platforms for enterprise users.
• Define policies for URL filtering, SSL inspection, malware protection, and data protection.
• Monitor web traffic behaviour and investigate policy violations or suspicious activity.
• Optimize policies to balance security, user experience, and performance.

Security Operations & Compliance

• Analyse SWG logs and alerts; integrate telemetry with SIEM and SOC teams.
• Support incident investigations related to web-borne threats and data exposure.
• Ensure SWG controls align with banking security standards and regulatory requirements.
• Maintain operational documentation and audit evidence.

Required Skills

• Strong experience with Secure Web Gateway / proxy-based security platforms.
• Solid understanding of HTTP/S, SSL/TLS inspection, DNS, and web traffic flows.
• Experience implementing user-based and device-based access policies.
• Familiarity with data loss prevention (DLP) policies, content filtering, and network traffic inspection.
• Ability to troubleshoot network and security issues in complex environments.
• Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS.
• Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus.
• Hands-on experience with networking protocols such as HTTP, HTTPS, DNS, and
• TCP/IP.
• Strong communication skills and the ability to collaborate with teams across various functions.
• Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are a plus.
• Ability to operate under audit and regulatory scrutiny.

Good to Have

• Exposure to ZTNA access models.
• Understanding of network firewalls and perimeter security.
• Familiarity with Web & API Protection technologies.
• Experience integrating SWG with identity providers and endpoint posture controls.
• Exposure to SASE / SSE frameworks.