Senior Cybersecurity – CASB Engineer
- Charlotte, NC
- $116,700-175,100 per year
- Permanent
- Full-time
- This is a hands-on operational job. We are looking for an experienced candidate with extensive operational experience creating policy, tuning policy, and supporting CASB
- Operate and maintain CASB solution in a diverse and demanding application environment
- Performing hands-on application onboarding, policy refinement, and troubleshooting
- Integration of platforms with other security solutions and data sources
- Engineers, deploys, configures, and maintains CASB integrations with SaaS application environments
- Integrate Applications/platforms with Identity Providers leveraging current IAM technologies for SSO support
- Develops advanced alerts/reports to meet requirements of key stakeholders and business units
- Develops automation for security tools management and workflow integration
- Collaborates with key stakeholders within Information Security and Engineering teams to develop specific use cases to address specific business requirements
- Creates and implements best practices for CASB policies/rules/signatures to mitigate threats and address data leakage
- Creation and implementation of custom alerting dashboards in SIEM for regular monitoring and investigations as needed
- Works extensively with Business Units/stakeholders across organization to setup and tune CASB policies to secure SaaS applications
- Aids in gathering, presenting metrics for measuring key performance and key risk indicators
- Provides ongoing support to existing monitoring capabilities and data collection systems
- Provides development support for the expansion and implementation of new and evolving systems/technologies
- Leads troubleshooting efforts in complex issues involving multiple platforms and network flows
- Coordinating with vendors and other technical teams on troubleshooting and escalations
- Technical Leadership: Proven track record of executing scaled security controls engineering and operations work responsibilities
- Operate within a follow the sun model and be available 24/7 to ensure continuous support and continuity.
- Track and analyze performance metrics and KPIs, identifying areas for improvement and implementing solutions to enhance efficiency, security efficacy, and ROI
- Prepare and present regular reports to senior management, highlighting the program's progress, challenges, and achievements.
- 3+ years of experience in Cybersecurity engineering with experience configuring, operating, and managing on-premise and cloud-based CASB and Secure Web Gateways. Extensive experience providing SME level support in large, highly dynamic enterprise environment.
- Engineering, administrative experience of Forcepoint, Broadcom, Linux, Windows systems
- SME level experience with Secure Service Edge architectures supporting CASB/SWG/ZTNA
- SME level experience with IdP, SSO, SAML, AD, Microsoft Entra
- Solid understanding and practical experience with web applications, web platforms, web application security, application firewalls, frameworks and protocols with respect to application development, deployment, and operation
- Strong understanding of TCP/IP, web protocols, networking, DNS and security concepts
- Expertise with mainstream operating systems, web services, programming languages, network devices and attack vectors
- Advanced expertise reviewing and analyzing log files, data correlation and packet captures
- Script writing and programming using common shell and mainstream languages
- Senior level understanding of PKI Technology
- Working knowledge of open source and commercial application security tools and frameworks
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field preferred
- Relevant certifications such as:
- Certified Cloud Security Professional (CCSP)
- Certified Information Systems Security Professional (CISSP)
- CASB-specific certifications or vendor certifications (e.g., Microsoft Certified: Security Operations Analyst Associate)
- Continuous learning mindset with a passion for staying current on cloud security innovations.
- Medical/Dental/Vision coverage
- 401(k) plan
- Tuition reimbursement program
- Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
- Paid Parental Leave
- Paid Caregiver Leave
- Additional sick leave beyond what state and local law require may be available but is unprotected.
- Adoption Reimbursement
- Disability Benefits (short term and long term)
- Life and Accidental Death Insurance
- Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
- Employee Assistance Programs (EAP)
- Extensive employee wellness programs
- Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.