GMS_Senior_WAF

EY; Bengaluru; On-site; INR 2,400,000 - 3,600,000; Full time

Job summary

EY is seeking a Senior CMS-TDR security engineer to lead hands-on work with WAF, SWG, and micro-segmentation across enterprise environments. You will manage and tune Akamai Kona WAF, Netskope SWG policies, and Illumio segmentation to protect applications and control east-west traffic.

The role requires 4+ years of hands-on experience and a strong foundation in web security, OWASP Top 10, and Zero Trust principles.

Qualifications

• 4+ years of hands-on WAF, SWG and micro segmentation experience.
• Experience protecting web apps and reducing lateral movement.
• Strong knowledge of OWASP Top 10 threats and mitigations.
• Familiar with Akamai Kona, Netskope and Illumio setup and tuning.
• Collaborates with SOC, networks, cloud and app teams.

Responsibilities

• Tune Akamai Kona WAF to protect apps against OWASP Top 10.
• Configure Netskope SWG policies for secure internet access.
• Design Illumio micro-segmentation policies for east-west traffic.
• Collaborate with SOC, network, cloud and app teams on incidents and changes.
• Analyze logs, reduce false positives, maintain docs.
• Support audits and continuous security improvements.

Skills

Web Security

OWASP Top 10

Zero Trust

Networking basics

Tools

Akamai Kona

Netskope

Illumio

Cloud Platforms

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

CMS-TDR – Senior (WAF/SWG/MSEG- Akamai Kona/Netskope/Illumio)

Job Summary

Looking for a security engineer with 4+ years of hands on experience in Web Application Firewall (WAF), Secure Web Gateway (SWG), and Micro Segmentation to secure applications, control internet access, and reduce lateral movement risk across enterprise environments.

Key Responsibilities

• Manage and tune Akamai Kona WAF to protect web applications from OWASP Top 10 threats
• Configure and operate Netskope SWG policies for secure internet access and threat protection
• Design and enforce Illumio micro segmentation policies to control east west traffic
• Work with SOC, network, cloud, and application teams to support incidents and policy changes
• Analyze logs, reduce false positives, and maintain operational documentation
• Support audits, compliance needs, and continuous security improvements

Required Skills

• Hands on experience with Akamai Kona, Netskope, and Illumio
• Strong understanding of web security, HTTP/S, OWASP Top 10
• Knowledge of proxy/SWG concepts and Zero Trust / segmentation principles
• Good networking fundamentals (TCP/IP, DNS, firewalls)

Preferred Skills

• Cloud exposure (AWS/Azure/GCP)
• API security and bot protection exposure
• Scripting (Python / PowerShell)
• Security certifications – nice to have

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.