Principal Cybersecurity - Proxy Web Filtering and CASB Engineer

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Consumer Technology experience team is delivering innovative and reliable technology solutions to power differentiated, simplified customer experiences. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

Job Description:

Join AT&T and reimagine the communications and technologies that connect the world. Our Consumer Technology experience team is delivering innovative and reliable technology solutions to power differentiated, simplified customer experiences. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

This career step requires expert level experience. Responsible for cyber security areas across products, services, infrastructure, networks, and/or applications while providing protection for AT&T, our customers, and our vendors/partners. Works with senior team members on various projects relating to the protection of devices, customers, assets, data, information technology, and networks.

Supports innovation, strategic planning, technical proof of concepts, testing, lab work, and various other technical program management related tasks associated with the cyber security programs.

Key Roles and Responsibilities:

• Engineers, deploys, configures, and maintains CASB integrations with SaaS application environments
• Integrate Applications/platforms with Identity Providers leveraging current IAM technologies for SSO support
• Develops advanced alerts/reports to meet requirements of key stakeholders and business units
• Develops automation for security tools management and workflow integration 
• Collaborates with key stakeholders within Information Security and Engineering teams to develop specific use cases to address specific business requirements 
• Creates and implements best practices for CASB policies/rules/signatures to mitigate threats and address data leakage
• Creation and implementation of custom alerting dashboards in SIEM for regular monitoring and investigations as needed
• Works extensively with Business Units/stakeholders across organization to setup and tune CASB policies to secure SaaS applications
• Aids in gathering, presenting metrics for measuring key performance and key risk indicators
• Provides ongoing support to existing monitoring capabilities and data collection systems 
• Provides development support for the expansion and implementation of new and evolving systems/technologies 
• Leads troubleshooting efforts in complex issues involving multiple platforms and network flows 
• Coordinating with vendors and other technical teams on troubleshooting and escalations
• Technical Leadership: Proven track record of executing scaled security controls engineering and operations work responsibilities
• Operate within a follow the sun model and be available 24/7 to ensure continuous support and continuity.
• Track and analyze performance metrics and KPIs, identifying areas for improvement and implementing solutions to enhance efficiency, security efficacy, and ROI
• Prepare and present regular reports to senior management, highlighting the program's progress, challenges, and achievements.

Qualifications 

• 7+ years of experience in Cybersecurity engineering with experience configuring, operating, and managing on-premise and cloud-based CASB and Secure Web Gateways. Extensive experience providing SME level support in large, highly dynamic enterprise environment. 
• Engineering, administrative experience of Forcepoint, Broadcom, Linux, Windows systems 
• SME level experience with Secure Service Edge architectures supporting CASB/SWG/ZTNA 
• SME level experience with IdP, SSO, SAML, AD, Microsoft Entra 
• Solid understanding and practical experience with web applications, web platforms, web application security, application firewalls, frameworks and protocols with respect to application development, deployment, and operation 
• Strong understanding of TCP/IP, web protocols, networking, DNS and security concepts 
• Expertise with mainstream operating systems, web services