Security Engineer II

Nykaa is seeking a Security Engineer II to strengthen its enterprise security operations and infrastructure protection capabilities. The role will be responsible for implementing, operating, and continuously improving security controls across secure web gateways, cloud access security, network firewalls, web application firewalls, endpoint detection and response, and cloud environments. The ideal candidate combines strong hands-on engineering skills with a solid understanding of networking and AWS security.

Responsibilities:

• Configure, administer, and troubleshoot SWG, CASB, and DLP solutions such as Netskope and Zscaler.
• Configure, administer, and troubleshoot ZTNA solutions such as Netskope and Zscaler.
• Manage and tune network firewall policies, objects, NAT, VPNs, and security monitoring on FortiGate firewalls.
• Operate and enhance WAF protections using Akamai, including rule tuning, exception handling, and incident investigation.
• Deploy, manage, and investigate alerts from EDR/XDR platforms such as Palo Alto Cortex XDR or CrowdStrike EDR.
• Monitor security events, perform root-cause analysis, and support incident response and remediation activities.
• Partner with infrastructure, application, and cloud teams to implement secure network and application architectures.
• Support security control reviews, vulnerability remediation, change management, and operational documentation.

Requirements:

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field.
• 5-6 years of hands-on experience in information security engineering, network security, or security operations.
• Practical experience with SWG, CASB, DLP, and ZTNA solutions such as Netskope and Zscaler.
• Hands-on experience with FortiGate network firewalls, Akamai WAF, and at least one EDR/XDR platform such as Palo Alto Cortex XDR or CrowdStrike EDR.
• Good knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, routing, VPNs, proxies, and troubleshooting.
• Good knowledge of AWS cloud services and security fundamentals, including IAM, VPC, security groups, logging, and monitoring.
• Strong analytical, communication, documentation, and incident-handling skills.

Good To Have:

• CCNP: Cisco Certified Network Professional.
• CCIE: Cisco Certified Internetwork Expert.
• CCSP: Certified Cloud Security Professional.