Secure Web Gateway & Email Security SME

Nixil

We are seeking a passionate Secure Web Gateway (SWG) & Email Security SME to support and enhance security capabilities for one of our key enterprise clients.

In this role, you will work extensively with Forcepoint Web Security as your primary focus, while also supporting Proofpoint Email Security to strengthen protection across web and email channels - the two most critical vectors in modern cybersecurity.

Although your core responsibilities center on Forcepoint and Proofpoint, exposure to additional technologies such as Qualys, Microsoft Defender, and CyberArk will allow you to deepen your impact across the customer’s security ecosystem.

If you enjoy taking ownership, shaping secure‑access architecture, and collaborating closely with customer stakeholders, this role offers the opportunity to grow your visibility, broaden your technical reach, and become a trusted specialist in high‑value security domains.

Essential Requirement

3–5 years of hands-on experience in Secure Web Gateway (SWG), proxy security, email security operations, or broader cybersecurity technologies.
Strong understanding of web security architecture, proxy logic, SSL/TLS inspection, identity-based authentication, and email threat protection fundamentals.
Practical experience supporting Forcepoint Web Security (primary requirement).
Hands-on experience with Proofpoint Email Security.
Solid understanding of cloud-based security concepts including secure internet access, cloud proxies, cloud email security, and identity-driven access controls.

Required Technology Implementation Experience

(Experience in a minimum of 3 of the following is required)

Forcepoint Web Security
Proofpoint Email Protection
Other Secure Web Gateway / SASE platforms (Zscaler, Blue Coat/Symantec, Netskope, Palo Alto)

Secure Web Gateway (cloud mode),
Cloud Access Security Broker (CASB),
Cloud-based email protection,
Zero Trust Network Access (ZTNA)

Enterprise security tools such as Qualys, Microsoft Defender (MDE / M365 Defender), or CyberArk
Web authentication technologies (NTLM, Kerberos, SAML), certificate workflows, and traffic inspection
Log analysis and packet capture tools (Wireshark, tcpdump, browser debugging tools)
PowerShell or Python scripting for automation, reporting, or operational tooling (preferred)