Information Security Manager

Job Description:

Secure Web Gateway & Email Security – Subject Matter Expert
We are seeking a passionate Secure Web Gateway (SWG) & Email Security SME to support and enhance security capabilities for one of our key enterprise clients.
In this role, you will work extensively with Forcepoint Web Security as your primary focus, while also supporting Proofpoint Email Security to strengthen protection across web and email channels - the two most critical vectors in modern cybersecurity.
Although your core responsibilities center on Forcepoint and Proofpoint, exposure to additional technologies such as Qualys, Microsoft Defender, and Cyber Ark will allow you to deepen your impact across the customer’s security ecosystem.
If you enjoy taking ownership, shaping secure‑access architecture, and collaborating closely with customer stakeholders, this role offers the opportunity to grow your visibility, broaden your technical reach, and become a trusted specialist in high‑value security domains.

Job Description:

You will join a team of dedicated specialists supporting a major enterprise customer.
Your work will focus on maintaining, improving, and optimizing web and email protection systems, while contributing meaningfully to the customer’s overall security posture:
Forcepoint Secure Web Gateway (Primary Focus)
Lead deployment, configuration, and continual enhancement of Forcepoint Web Security.
Develop and tune policies such as URL filtering, SSL inspection, malware scanning, identity‑based access controls, and DLP enforcement.
Troubleshoot advanced proxy scenarios including authentication flow issues, PAC logic, certificate challenges, and traffic performance.
Strengthen secure internet access and improve end‑to‑end visibility of web traffic.

Proofpoint Email Security (Secondary Focus)
Support and optimize Proofpoint Email Protection components, including spam/malware filtering, impersonation protection, and threat isolation.
Investigate email threats, adjust policies, and recommend improvements to enhance detection and resilience.
Support DLP and encryption workflows to protect sensitive data across email communications.

Broader Technology Support (Advantageous)

Experience with enterprise security tools such as Qualys, Microsoft Defender (MDE / M365 Defender), Cyber Ark, and familiarity with other SWG/SASE platforms (Zscaler, Netskope, Blue Coat, Palo Alto).
Ability to prepare clear and structured monthly operational reports for supported technologies.
Confidence in presenting insights, trends, and recommendations during customer review meetings.

Job Level required:
Secure Web Gateway & Email Security Subject Matter Expert
Applies strong subject‑matter expertise to support customer security objectives.
Works independently on moderate to advanced technical tasks.
Supports design, optimization, and integration of secure web and email protection controls.
Collaborates with SOC, network, and security engineering teams.
Contributes to documentation, process improvement, and knowledge sharing.

Technical Skills and Experience

Required:

Essential Requirement:
3–5 years of hands-on experience in Secure Web Gateway (SWG), proxy security, email security operations, or broader cybersecurity technologies.
Strong understanding of web security architecture, proxy logic, SSL/TLS inspection, identity-based authentication, and email threat protection fundamentals.
Practical experience supporting Forcepoint Web Security (primary requirement).
Hands-on experience with Proofpoint Email Security.
Solid understanding of cloud-based security concepts including secure internet access, cloud proxies, cloud email security, and identity-driven access controls.

Required Technology Implementation Experience
(Experience in a minimum of 3 of the following is required)
Forcepoint Web Security
Proofpoint Email Protection
Other Secure Web Gateway / SASE platforms (Zscaler, Blue Coat/Symantec, Netskope, Palo Alto)
Cloud security platforms or capabilities such as:
Secure Web Gateway (cloud mode),
Cloud Access Security Broker (CASB),
Cloud-based email protection,
Zero Trust Network Access (ZTNA)
5. Enterprise security tools such as Qualys, Microsoft Defender (MDE / M365 Defender), or Cyber Ark
6. Web authentication technologies (NTLM, Kerberos, SAML), certificate workflows, and traffic inspection
7. Log analysis and packet capture tools (Wireshark, tcpdump, browser debugging tools)
8. Power Shell or Python scripting for automation, reporting, or operational tooling (preferred)