Embark on a fulfilling career at EY, where global scale, dedicated support, an inclusive culture, and advanced technology empower you to achieve your full potential. Your unique insights are valued in our mission to continuously improve and build a better working world for everyone. Join us to craft an exceptional professional journey and contribute to a more sustainable global economy.

This Senior role focuses on Security Engineering, specifically within Web Application Firewall (WAF), Secure Web Gateway (SWG), and Micro Segmentation technologies. The position is crucial for safeguarding applications, managing internet access, and mitigating risks associated with lateral movement across enterprise networks.

As a Senior Security Engineer, you will be instrumental in managing and optimizing Akamai Kona WAF to defend web applications against common threats like the OWASP Top 10. You will configure and maintain Netskope SWG policies to ensure secure internet access and robust threat protection. Additionally, you will design and implement Illumio micro segmentation policies to effectively control east-west traffic flow.

Collaboration is key, as you'll work closely with Security Operations Center (SOC), network, cloud, and application teams to address incidents and manage policy updates. Your role involves detailed log analysis, reducing false positives, and maintaining comprehensive operational documentation. You will also provide support for audits, compliance requirements, and ongoing security enhancements.

We are seeking a security engineer with a minimum of 4 years of practical experience in Web Application Firewall (WAF), Secure Web Gateway (SWG), and Micro Segmentation. A strong foundation in web security principles, including HTTP/S and the OWASP Top 10, is essential. Familiarity with proxy concepts, SWG functionalities, and Zero Trust / segmentation strategies is required. Solid networking fundamentals, covering TCP/IP, DNS, and firewall operations, are also necessary.

Preferred qualifications include experience with cloud platforms such as AWS, Azure, or GCP, as well as exposure to API security and bot protection. Proficiency in scripting languages like Python or PowerShell is advantageous. Holding relevant security certifications is considered a plus.