Lead Security Engineer - Secure Web Gateway
IDFC FIRST Bank · Mumbai
- Experience10+ yrs
- SalaryNot disclosed
- Work modeunknown
- Levellead
- Posted18 Sept 2026
About IDFC FIRST Bank
IDFC FIRST Bank is hiring in Mumbai in financial services. This role looks for around 10+ years of experience.
The role
Lead security engineer role for secure web gateway (SWG) in banking and financial services; you will design, configure, and operate SWG for enterprise internet access security and manage SWG logs, alerts, and incident investigations in a regulated environment. Required skills include Secure Web Gateway/proxy-based security platforms, HTTP/HTTPS, SSL/TLS inspection, DNS, TCP/IP, URL filtering, data loss prevention (DLP), content filtering, network traffic inspection, SIEM/SOC telemetry integration, and cloud security principles (SaaS, IaaS, PaaS), with ISO 27001, NIST, or GDPR knowledge as a plus. Location is Navi Mumbai/Chennai/Bengaluru/Hyderabad, India with work mode not specified.
Full job description
Job Requirements
Lead Network Security Engineer (Secure Web Gateway – SWG)
Location: Navi Mumbai/Chennai/Bengaluru/Hyderabad
Experience: 10+ years
Employment Type: Full-time
Role Overview
We are looking for a Senior Network Security Engineer – Secure Web Gateway (SWG) to manage and optimize enterprise internet access security for users and endpoints in a regulated banking environment.
This role focuses on secure web access, content inspection, threat protection, and data controls, while collaborating with teams managing firewalls, ZTNA, and Web/API Protection.
Key Responsibilities
Primary Focus – Secure Web Gateway
Design, configure, and operate Secure Web Gateway (SWG) platforms for enterprise users.Define policies for URL filtering, SSL inspection, malware protection, and data protection.Monitor web traffic behaviour and investigate policy violations or suspicious activity.Optimize policies to balance security, user experience, and performance.
Security Operations & Compliance
Analyse SWG logs and alerts; integrate telemetry with SIEM and SOC teams.Support incident investigations related to web-borne threats and data exposure.Ensure SWG controls align with banking security standards and regulatory requirements.Maintain operational documentation and audit evidence.
Required Skills
Strong experience with Secure Web Gateway / proxy-based security platforms. Solid understanding of HTTP/S, SSL/TLS inspection, DNS, and web traffic flows. Experience implementing user-based and device-based access policies. Familiarity with data loss prevention (DLP) policies, content filtering, and network traffic inspection. Ability to troubleshoot network and security issues in complex environments. Strong understanding of cloud security principles, including SaaS, IaaS, and PaaS. Knowledge of security frameworks such as ISO 27001, NIST, or GDPR is a plus. Hands-on experience with networking protocols such as HTTP, HTTPS, DNS, and TCP/IP. Strong communication skills and the ability to collaborate with teams across various functions. Certifications in network security (e.g., CCSP, CISSP, CompTIA Security+, or equivalent) are a plus. Ability to operate under audit and regulatory scrutiny.
Good to Have
Exposure to ZTNA access models.Understanding of network firewalls and perimeter security.Familiarity with Web & API Protection technologies.Experience integrating SWG with identity providers and endpoint posture controls.Exposure to SASE / SSE frameworks.