Principal Cybersecurity Engineer (Zscaler / Netskope )

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We’re all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career. 

As a Principal Network Security Engineer, you’ll design, develop, implement, and maintain network security solutions and capabilities that reduce risk to our business, brand, and customers. On our best-in-class engineering team, you’ll help us build innovative strategies and capabilities that increase our security posture and enable faster delivery. You’ll thrive in a hybrid, multi-cloud environment, leverage new technology, and drive the adoption of automation capabilities— all on a team that sets the example for supporting each other, working hard together, and celebrating often. Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management. 

Responsibilities 

• Acts as the principal advisor to upper management in Cybersecurity matters. Ensures security improvement designs are evaluated, validated, and implemented as required. Performs cyber defense incident triage, to include determining scope, urgency, and potential impact; identifying the specific vulnerability 

• Certifies that protection and detection capabilities are acquired or developed using the Cybersecurity engineering approach and are consistent with organization-level cybersecurity architecture 
• Explores and assesses the latest technology trends, disruptions and security/IT service business models to ensure Business Technology maintains, and improves, organization cyber competitive edge 
• Works closely with management to define and promote the strategic direction of the team. Provides strong leadership and direction to team members. Provides subject matter expertise across all Cybersecurity technologies 

• Creates and maintains Cybersecurity technology roadmap. Ensures compliance to audit, regulatory and legal requirements. Makes recommendations that enable expeditious remediation 
• Builds and maintains effective relationships with peers and internal business partners, and external vendors 
• Oversees project implementation to ensure successful solution delivery 
• Researches, engineers and integrates new Cybersecurity solutions. Applies service-oriented security architecture principles to meet organization's confidentiality, integrity, and availability requirements 

Minimum Qualifications 

At a minimum, here’s what we need from you: 

• Bachelors – Computer Science or related 
• 6+ years – Information Security, Application Security, Security Engineering or related 
• Internal applicants only: technical proficiency rating of proficient on the Dreyfus engineering scale 

Preferred Qualifications 

Bonus Points If You Have: 

• Demonstrated ability with scripting, coding, and automation (e.g., Python, Ansible, shell scripting)
• Experience with Secure Web Gateway (SWG) from vendors such as Zscaler, Netskope, Palo Alto Networks
• Experience implementing and managing Zero Trust Network Access (ZTNA)
• Experience managing Remote Access VPNs
• Knowledge of Firewalls, Proxy, IDS/IPS, VPN’s, VLANS, routing and other network security technologies
• Knowledge of virtualization technologies including virtual firewalls, networking and segmentation
• Knowledge of Cloud architecture and securing cloud communications (AWS, GCP)
• Knowledge of SIEM technologies such as Splunk and creation of security event related dashboards
• Knowledge of access control systems, PKI, multi-factor authentication, and entitlements management

External applicants will be required to perform a technical interview. 

#LI-JJ1

Application Deadline:

The application window for this position is anticipated to close on Mar-31-2024. We encourage you to apply as soon as possible. The posting may be available past this date, but it is not guaranteed.

Compensation:

The base pay for this p