Lead Security Engineer Secure Web Gateway

Role InformationLead Network Security Engineer (Secure Web Gateway SWG) Location: Navi Mumbai/Chennai/Bengaluru/Hyderabad Experience: 10+ years Employment Type: Full-time Role OverviewWe are looking for a Senior Network Security Engineer Secure Web Gateway (SWG) to manage and optimize enterprise internet access security for users and endpoints in a regulated banking environment. This role focuses on secure web access, content inspection, threat protection, and data controls, while collaborating with teams managing firewalls, ZTNA, and Web/API Protection. ResponsibilitiesDesign, configure, and operate Secure Web Gateway (SWG) platforms for enterprise users.Define policies for URL filtering, SSL inspection, malware protection, and data protection.Monitor web traffic behaviour and investigate policy violations or suspicious activity.Optimize policies to balance security, user experience, and performance.Analyse SWG logs and alerts; integrate telemetry with SIEM and SOC teams.Support incident investigations related to web-borne threats and data exposure.Ensure SWG controls align with banking security standards and regulatory requirements.Maintain operational documentation and audit evidence.Required SkillsStrong experience with Secure Web Gateway / proxy-based security platforms.Solid understanding of HTTP/S, SSL/TLS inspection, DNS, and web traffic flows.Experience implementing user-based and device-based access policies.Familiarity with data loss prevention (DLP) policies, content filtering, and network traffic inspection.Ability to troubleshoot network and security issues in complex environments.Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS.Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus.Hands-on experience with networking protocols such as HTTP, HTTPS, DNS, and TCP/IP.Strong communication skills and the ability to collaborate with teams across various functions.Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are a plus.Ability to operate under audit and regulatory scrutiny.Good to HaveExposure to ZTNA access models.Understanding of network firewalls and perimeter security.Familiarity with Web & API Protection technologies.Experience integrating SWG with identity providers and endpoint posture controls.Exposure to SASE / SSE frameworks.