GMS_Senior_SWG

Ernst & Young Advisory Services Sdn Bhd; Thiruvananthapuram; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

EY is seeking a Security Engineer in India with 4+ years of hands-on experience in WAF, SWG, and Illumio micro-segmentation to secure applications and control internet access across enterprise environments.

You will collaborate with SOC, network, cloud and application teams to tune security controls, analyze logs, and support audits while continuously improving security postures.

Qualifications

• Hands-on with Akamai Kona, Netskope, and Illumio.
• Strong understanding of web security and OWASP Top 10.
• Knowledge of proxy/SWG concepts and Zero Trust.
• Strong networking fundamentals: TCP/IP, DNS, firewalls.

Responsibilities

• Manage and tune Akamai Kona WAF to protect apps from OWASP Top 10.
• Configure and operate Netskope SWG policies for secure internet access.
• Design and enforce Illumio micro-segmentation to control east-west traffic.
• Collaborate with SOC, network, cloud, and app teams.
• Analyze logs, reduce false positives, maintain docs.
• Support audits and compliance; drive security improvements.

Skills

Akamai Kona WAF

Netskope SWG

Illumio micro-segmentation

Web security

OWASP Top 10

Zero Trust

TCP/IP networking

Job description

Job Summary

Looking for a security engineer with 4+ years of hands‑on experience in Web Application Firewall (WAF), Secure Web Gateway (SWG), and Micro‑Segmentation to secure applications, control internet access, and reduce lateral movement risk across enterprise environments.

Key Responsibilities

• Manage and tune Akamai Kona WAF to protect web applications from OWASP Top 10 threats
• Configure and operate Netskope SWG policies for secure internet access and threat protection
• Design and enforce Illumio micro‑segmentation policies to control east‑west traffic
• Work with SOC, network, cloud, and application teams to support incidents and policy changes
• Analyze logs, reduce false positives, and maintain operational documentation
• Support audits, compliance needs, and continuous security improvements

Required Skills

• Hands‑on experience with Akamai Kona, Netskope, and Illumio
• Strong understanding of web security, HTTP/S, OWASP Top 10
• Knowledge of proxy/SWG concepts and Zero Trust / segmentation principles
• Good networking fundamentals (TCP/IP, DNS, firewalls)

Preferred Skills

• API security and bot protection exposure
• Scripting (Python / PowerShell)
• Security certifications – nice to have

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor