Senior Web Application Firewall Consultant

EY; Thiruvananthapuram; On-site; INR 1,200,000 - 1,700,000; Full time

Job summary

EY is seeking a CMS-TDR Senior security engineer in India with 4+ years of hands-on experience in Web Application Firewall (WAF), Secure Web Gateway (SWG), and Illumio microsegmentation to secure applications and control internet access. The role involves protecting applications, reducing lateral movement, and collaborating with SOC and cloud teams.

You will tune Akamai Kona WAF, configure Netskope SWG, and design microsegmentation policies while supporting audits and ongoing security

Qualifications

• 4+ years of hands-on experience in WAF/SWG and Microsegmentation.
• Experience securing applications and reducing lateral movement across enterprise environments.

Responsibilities

• Manage and tune Akamai Kona WAF to protect web applications from OWASP Top 10 threats.
• Configure and operate Netskope SWG policies for secure internet access and threat protection.
• Design and enforce Illumio microsegmentation policies to control eastwest traffic.
• Work with SOC, network, cloud, and application teams to support incidents and policy changes.
• Analyze logs, reduce false positives, and maintain operational documentation.
• Support audits, compliance needs, and continuous security improvements.

Skills

Akamai Kona WAF

Netskope SWG

Illumio microsegmentation

Web security fundamentals

Zero Trust concepts

TCP/IP networking

OWASP Top 10

Tools

Akamai Kona

Netskope

Illumio

Job description

CMS-TDR Senior (WAF/SWG/MSEG- Akamai Kona/Netskope/Illumio) Job Summary

Looking for a security engineer with 4+ years of handson experience in Web Application Firewall (WAF), Secure Web Gateway (SWG), and MicroSegmentation to secure applications, control internet access, and reduce lateral movement risk across enterprise environments.

Key Responsibilities

• Manage and tune Akamai Kona WAF to protect web applications from OWASP Top 10 threats
• Configure and operate Netskope SWG policies for secure internet access and threat protection
• Design and enforce Illumio microsegmentation policies to control eastwest traffic
• Work with SOC, network, cloud, and application teams to support incidents and policy changes
• Analyze logs, reduce false positives, and maintain operational documentation
• Support audits, compliance needs, and continuous security improvements

Required Skills

• Handson experience with Akamai Kona, Netskope, and Illumio
• Strong understanding of web security, HTTP/S, OWASP Top 10
• Knowledge of proxy/SWG concepts and Zero Trust / segmentation principles
• Good networking fundamentals (TCP/IP, DNS, firewalls)

Preferred Skills

• Cloud exposure (AWS/Azure/GCP)
• API security and bot protection exposure
• Scripting (Python / PowerShell)
• Security certifications nice to have