Senior Cybersecurity – CASB Engineer

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join our dynamic Enterprise Remote Access team in a Senior Cybersecurity position, where you will play a pivotal role in safeguarding AT&T's networks. This is an exciting opportunity for an experienced professional well-versed in various VPN and network access control systems.

Job Description:

• This is a hands-on operational job. We are looking for an experienced candidate with extensive operational experience creating policy, tuning policy, and supporting CASB
• Operate and maintain CASB solution in a diverse and demanding application environment
• Performing hands-on application onboarding, policy refinement, and troubleshooting
• Integration of platforms with other security solutions and data sources

Key Roles and Responsibilities:

• Engineers, deploys, configures, and maintains CASB integrations with SaaS application environments
• Integrate Applications/platforms with Identity Providers leveraging current IAM technologies for SSO support
• Develops advanced alerts/reports to meet requirements of key stakeholders and business units
• Develops automation for security tools management and workflow integration
• Collaborates with key stakeholders within Information Security and Engineering teams to develop specific use cases to address specific business requirements
• Creates and implements best practices for CASB policies/rules/signatures to mitigate threats and address data leakage
• Creation and implementation of custom alerting dashboards in SIEM for regular monitoring and investigations as needed
• Works extensively with Business Units/stakeholders across organization to setup and tune CASB policies to secure SaaS applications
• Aids in gathering, presenting metrics for measuring key performance and key risk indicators
• Provides ongoing support to existing monitoring capabilities and data collection systems
• Provides development support for the expansion and implementation of new and evolving systems/technologies
• Leads troubleshooting efforts in complex issues involving multiple platforms and network flows
• Coordinating with vendors and other technical teams on troubleshooting and escalations
• Technical Leadership: Proven track record of executing scaled security controls engineering and operations work responsibilities
• Operate within a follow the sun model and be available 24/7 to ensure continuous support and continuity.
• Track and analyze performance metrics and KPIs, identifying areas for improvement and implementing solutions to enhance efficiency, security efficacy, and ROI
• Prepare and present regular reports to senior management, highlighting the program's progress, challenges, and achievements.

Qualifications:

• 3+ years of experience in Cybersecurity engineering with experience configuring, operating, and managing on-premise and cloud-based CASB and Secure Web Gateways. Extensive experience providing SME level support in large, highly dynamic enterprise environment.
• Engineering, administrative experience of Forcepoint, Broadcom, Linux, Windows systems
• SME level experience with Secure Service Edge architectures supporting CASB/SWG/ZTNA
• SME level experience with IdP, SSO, SAML, AD, Microsoft Entra
• Solid understanding and practical experience with web applications, web platforms, web application security, application firewalls, frameworks and protocols with respect to application development, deployment, and operation
• Strong understanding of TCP/IP, web protocols, networking, DNS and security concepts
• Expertise with mainstream operating systems, web services, programming languages, network devices and attack vectors
• Advanced expertise reviewing and analyzing log files, data correlation and packet captures
• Script writing and programming using common shell and mainstream languages
• Senior level understanding of PKI Technology
• Working knowledge of open source and commercial application security tools and frameworks

Education:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field preferred
• Relevant certifications such as:
  • Certified Cloud Security Professional (CCSP)
  • Certified Information Systems Security Professional (CISSP)
  • CASB-specific certifications or vendor certifications (e.g., Microsoft Certified: Security Operations Analyst Associate)
• Continuous learning mindset with a passion for staying current on cloud security innova