GMS - Senior - WAF - SWG - MSEG

Ernst & Young Advisory Services Sdn Bhd; Thiruvananthapuram; On-site; INR 2,500,000 - 3,000,000; Full time

Job summary

Ernst & Young Advisory Services Sdn Bhd is seeking a security engineer with 4+ years of hands-on experience in web application firewall, SWG, and micro-segmentation to secure applications and control internet access.

The role involves managing Akamai Kona WAF, Netskope SWG, and Illumio policies, collaborating with SOC, network, cloud, and application teams, and driving continuous security improvements across enterprise environments.

Qualifications

• Hands-on experience with Akamai Kona, Netskope, and Illumio.
• Strong understanding of web security, HTTP/S, and OWASP Top 10.
• Knowledge of proxy/SWG concepts and Zero Trust/segmentation principles.
• Good networking fundamentals (TCP/IP, DNS, firewalls).

Responsibilities

• Manage and tune Akamai Kona WAF to protect web applications from OWASP Top 10 threats.
• Configure Netskope SWG policies for secure internet access and threat protection.
• Design and enforce Illumio micro-segmentation policies to control east-west traffic.
• Work with SOC, network, cloud, and application teams on incidents and policy changes.
• Analyze logs, reduce false positives, and maintain operational documentation.
• Support audits, compliance needs, and continuous security improvements.

Skills

Akamai Kona

Netskope

Illumio

Web security

OWASP Top 10

HTTP/S

Zero Trust

SWG concepts

Networking basics

Tools

Akamai Kona WAF

Netskope SWG

Illumio

Job description

Job Summary

Looking for a security engineer with 4+ years of hands‑on experience in Web Application Firewall (WAF), Secure Web Gateway (SWG), and Micro‑Segmentation to secure applications, control internet access, and reduce lateral movement risk across enterprise environments.

Key Responsibilities

• Manage and tune Akamai Kona WAF to protect web applications from OWASP Top 10 threats
• Configure and operate Netskope SWG policies for secure internet access and threat protection
• Design and enforce Illumio micro‑segmentation policies to control east‑west traffic
• Work with SOC, network, cloud, and application teams to support incidents and policy changes
• Analyze logs, reduce false positives, and maintain operational documentation
• Support audits, compliance needs, and continuous security improvements

Required Skills

• Hands‑on experience with Akamai Kona, Netskope, and Illumio
• Strong understanding of web security, HTTP/S, OWASP Top 10
• Knowledge of proxy/SWG concepts and Zero Trust / segmentation principles
• Good networking fundamentals (TCP/IP, DNS, firewalls)

Preferred Skills

• API security and bot protection exposure
• Scripting (Python / PowerShell)
• Security certifications – nice to have

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.

Provider

Description

Enabled

SAP as service provider

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor