Senior Network Security Engineer

Description

We are looking for a senior network security engineer with a strong specialization in secure web gateway (SWG) and proxy technologies, particularly Blue Coat ProxySG (now part of Broadcom/Symantec). This role sits within our broader network security function and is responsible for administering, securing, and optimizing web/internet access infrastructure across the organization.

Candidates should bring at least 2–3 years of hands-on Blue Coat ProxySG / SGOS administration experience as part of a broader network security career (typically 5+ years overall). Experience in banking and financial services is a strong plus, but not mandatory.

Key responsibilities

Proxy & secure web gateway administration
Administer, configure, and support Blue Coat ProxySG (SGOS) and related secure web gateway/web security solutions.
Design, implement, and maintain web filtering categories, acceptable use policies, and secure internet access controls.
Configure and manage SSL/TLS interception (SSL visibility), authentication integration (AD/LDAP, Kerberos, SAML), and ICAP integration with DLP, antivirus, and sandboxing solutions.
Monitor proxy performance, availability, and capacity; conduct tuning and optimization to ensure minimal latency and maximum uptime.

Troubleshooting & incident response
Troubleshoot proxy-related incidents, connectivity issues, and policy conflicts, working across network layers (TCP/IP, DNS, HTTP/HTTPS, routing).
Participate in security incident response related to web-based threats, malicious traffic, and policy violations.
Collaborate with SOC, network, and broader cybersecurity teams to correlate proxy logs with SIEM and threat intelligence platforms.

Project, migration & lifecycle support
Support upgrades, patching, and lifecycle management of Blue Coat ProxySG appliances and related SWG components.
Assist with migration or integration projects between on-premise proxy solutions and cloud-delivered SWG/SASE platforms.
Contribute to automation and scripting initiatives to streamline policy deployment, reporting, and routine administration tasks.

Governance, documentation & compliance
Prepare and maintain technical documentation, configuration standards, and operational runbooks.
Support internal and external audits by providing evidence of secure configuration, change control, and policy enforcement.
Ensure alignment with information security policies and relevant regulatory frameworks (e.g., SAMA, NCA ECC, ISO/IEC 27001, PCI DSS) where applicable.

Requirements

• Bachelor's degree in computer science, information technology, network engineering, or a related field (or equivalent practical experience).
• 5+ years of overall network/cybersecurity engineering experience, including a minimum of 2–3 years of hands-on Blue Coat ProxySG / SGOS administration.
• Alternatively, 5+ years of overall network/cybersecurity experience with strong hands-on exposure to other leading secure web gateway or proxy platforms (e.g., Symantec Web Security Service, Forcepoint, McAfee/Skyhigh Web Gateway, Cisco WSA/Umbrella, Zscaler, Fortinet FortiProxy), with demonstrated ability and willingness to specialize in Blue Coat ProxySG.
• Strong understanding of core networking concepts: TCP/IP, DNS, HTTP/HTTPS, routing, and network segmentation.
• Hands-on experience with web filtering, URL categorization, SSL/TLS interception, and content inspection policies.
• Experience integrating proxy/SWG platforms with DLP, sandboxing, threat intelligence, or SIEM solutions is highly valued.
• Excellent troubleshooting, analytical, and communication skills, with the ability to work cross-functionally with network, security, and infrastructure teams.
• Experience in banking, financial services, or other regulated sectors is preferred but not required.