Lead Security Engineer - Secure Web Gateway

IDFC FIRST Bank; Mumbai; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

IDFC FIRST Bank is looking for a Lead Network Security Engineer (Secure Web Gateway) to manage enterprise internet access security. This role emphasizes secure web access, content inspection, and threat protection in a regulated banking environment. Key responsibilities include designing SWG platforms, monitoring web traffic, and ensuring compliance with banking security standards. Candidates must have strong experience in network security with certifications being a plus. The position is full-time and based in Mumbai, Chennai, Bengaluru, or Hyderabad.

Qualifications

• 10+ years of experience in network security.
• Strong understanding of secure web access and content inspection.
• Ability to troubleshoot network and security issues in complex environments.

Responsibilities

• Design, configure, and operate Secure Web Gateway platforms for enterprise users.
• Define policies for URL filtering, SSL inspection, and malware protection.
• Monitor web traffic behaviour and investigate policy violations.
• Support incident investigations related to web-borne threats.

Skills

Secure Web Gateway

SSL/TLS inspection

HTTP/S

access policies

data loss prevention

cloud security principles

network security frameworks

network protocols

communication skills

network troubleshooting

Education

Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+)

Job description

Role Information

Lead Network Security Engineer (Secure Web Gateway – SWG)

Location: Navi Mumbai/Chennai/Bengaluru/Hyderabad

Experience: 10+ years

Employment Type: Full-time

Role Overview

We are looking for a Senior Network Security Engineer – Secure Web Gateway (SWG) to manage and optimize enterprise internet access security for users and endpoints in a regulated banking environment.

This role focuses on secure web access, content inspection, threat protection, and data controls, while collaborating with teams managing firewalls, ZTNA, and Web/API Protection.

Responsibilities

• Design, configure, and operate Secure Web Gateway (SWG) platforms for enterprise users.
• Define policies for URL filtering, SSL inspection, malware protection, and data protection.
• Monitor web traffic behaviour and investigate policy violations or suspicious activity.
• Optimize policies to balance security, user experience, and performance.
• Analyse SWG logs and alerts; integrate telemetry with SIEM and SOC teams.
• Support incident investigations related to web-borne threats and data exposure.
• Ensure SWG controls align with banking security standards and regulatory requirements.
• Maintain operational documentation and audit evidence.

Required Skills

• Strong experience with Secure Web Gateway / proxy-based security platforms.
• Solid understanding of HTTP/S, SSL/TLS inspection, DNS, and web traffic flows.
• Experience implementing user-based and device-based access policies.
• Familiarity with data loss prevention (DLP) policies, content filtering, and network traffic inspection.
• Ability to troubleshoot network and security issues in complex environments.
• Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS.
• Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus.
• Hands-on experience with networking protocols such as HTTP, HTTPS, DNS, and TCP/IP.
• Strong communication skills and the ability to collaborate with teams across various functions.
• Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are a plus.
• Ability to operate under audit and regulatory scrutiny.

Good to Have

• Exposure to ZTNA access models.
• Understanding of network firewalls and perimeter security.
• Familiarity with Web & API Protection technologies.
• Experience integrating SWG with identity providers and endpoint posture controls.
• Exposure to SASE / SSE frameworks.