Data Protection Security Engineer - Netskope Lead (8+ years)

Continuum Resource Network; Foster City (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

401k

Life Insurance

Medical Insurance

Job summary

Continuum Resource Network in Foster City, CA is seeking a Data Protection Security Engineer – Netskope Lead to own enterprise Netskope deployment, configuration, and DLP initiatives. You will lead NG SWG and NPA across the enterprise, shaping zero-trust access and data protection policies.

The ideal candidate has hands-on Netskope experience, cloud and network security expertise, and a track record building and managing DLP programs in large environments.

Qualifications

• 8+ years in network, cloud, or information security engineering.
• 2+ years deploying and managing Netskope NG SWG/NPA in enterprise environments.
• Experience developing and managing DLP policies.
• Strong understanding of zero-trust network access (ZTNA).
• Proficiency with SSL/TLS inspection, proxy architectures, CASB functionality.
• IAM platform knowledge (Okta, Azure AD, SAML, SCIM).
• Bachelor's degree in CS/IT/Cybersecurity or equivalent.

Responsibilities

• Lead deployment, configuration, and ongoing administration of Netskope NG SWG and NPA.
• Design and maintain security controls: SSL/TLS inspection, URL filtering, cloud app controls.
• Develop zero-trust access strategies and private app onboarding in Netskope NPA.
• Integrate Netskope with IAM platforms (Okta, Azure AD, SAML, SCIM).
• Manage Netskope client deployment and endpoint integrations.
• Establish logging, monitoring, alerting, and reporting with SIEM.
• Develop and maintain enterprise DLP policies for PII, PHI, PCI, IP, etc.
• Test, tune, and validate DLP policies to reduce false positives.
• Investigate DLP alerts and incidents; assist escalation processes.
• Collaborate with Legal, Compliance, Data Governance, Security, Infra.
• Create architecture runbooks and security procedures; mentor juniors.
• Serve as SME for Netskope platforms and enterprise DLP strategy.

Skills

Netskope

Cloud security

Network security

DLP policies

Zero trust

SIEM integration

IAM integration

Education

Bachelor's degree

Tools

Netskope NG SWG

Netskope NPA

Okta

Job description

We are helping an on‑demand, autonomous ride‑hailing company find a Data Protection Security Engineer – Netskope Lead to lead the enterprise implementation, administration, and optimization of Netskope security platforms, including Next-Generation Secure Web Gateway (NG SWG), Network Private Access (NPA), and Data Loss Prevention (DLP).

In this role, you’ll own the end‑to‑end deployment, configuration, and operational health of the Netskope environment while driving enterprise‑wide DLP initiatives and zero‑trust access strategies. You’ll partner closely with cross‑functional teams to develop scalable security policies, strengthen cloud and web security controls, and protect sensitive organizational data.

The ideal candidate brings deep hands‑on Netskope expertise, strong cloud and network security knowledge, and experience building and managing DLP programs within complex enterprise environments.

As a Data Protection Security Engineer – Netskope Lead, you’ll:

• Lead the deployment, configuration, and ongoing administration of Netskope NG SWG and NPA platforms across the enterprise environment.
• Design and maintain security controls, including SSL/TLS inspection, URL filtering, cloud application controls, threat protection profiles, and traffic steering policies.
• Develop and implement zero‑trust access strategies by configuring application segmentation, least‑privilege access policies, and private application onboarding within Netskope NPA.
• Integrate Netskope with identity and access management platforms such as Okta, Azure AD, SAML, and SCIM for user‑based policy enforcement.
• Manage Netskope client deployment and coordinate endpoint integrations with IT and endpoint engineering teams.
• Establish and maintain logging, monitoring, alerting, and reporting integrations with SIEM and security operations platforms.
• Develop and maintain enterprise DLP policies protecting sensitive data types, including PII, PHI, PCI, intellectual property, and other confidential information.
• Conduct DLP policy testing, tuning, and validation activities to improve detection accuracy and minimize false positives.
• Investigate and respond to DLP alerts, security events, and policy violations while supporting incident escalation processes.
• Partner cross‑functionally with Legal, Compliance, Data Governance, Security, and Infrastructure teams to align policies with organizational security and regulatory requirements.
• Create and maintain architecture documentation, operational runbooks, and security procedures while providing guidance to junior engineers and operational teams.
• Serve as the subject matter expert for Netskope platforms, cloud security controls, and enterprise DLP strategy.

Qualifications:

• 8+ years of experience in network security, cloud security, or information security engineering
• 2+ years of hands‑on experience deploying and managing Netskope NG SWG and/or NPA in an enterprise environment
• Demonstrated experience developing and managing DLP policies, including policy design, testing, and tuning
• Strong understanding of zero‑trust network access (ZTNA) concepts and architectures
• Proficiency with SSL/TLS inspection, proxy architectures, and cloud access security broker (CASB) functionality
• Working knowledge of identity and access management platforms (Okta, Azure AD, SAML, SCIM)
• Familiarity with regulatory frameworks relevant to DLP (HIPAA, PCI‑DSS, GDPR, CCPA, etc.)
• Strong analytical and troubleshooting skills with the ability to work through complex network and policy issues
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field — or equivalent hands‑on experience in lieu of a degree

Preferred Qualifications:

• Netskope One Professional or equivalent Netskope certification
• Experience integrating Netskope with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, etc.)
• Background in endpoint security, SASE architecture, or broader SSE framework implementation
• Experience with scripting or automation (Python, PowerShell) for policy management or log analysis
• Familiarity with additional DLP tools or platforms beyond Netskope
• Preferred Certifications: CISSP, CCSP (ISC²), CISM or equivalent security certification CompTIA Security+ or Network+

401k

Life Insurance

Medical Insurance