Lead, Infrastructure Security Engineer - CASB and DSPM

Prudential Financial; Newark (NJ); On-site; USD 134,000 - 220,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) plan with company match

Company-funded pension

Wellness program

Education benefit

Employee stock purchase plan

Job summary

Prudential Financial in Newark, NJ is seeking a Lead Infrastructure Security Engineer to design, implement, and manage data protection strategies across cloud and SaaS environments, leveraging Z Scaler and MS 365 security features. You will drive CASB, DSPM, and data security initiatives, with a strong emphasis on Zero Trust, regulatory compliance, and incident response.

The role requires hands-on experience with CASB and DSPM tools, architecture design skills, and deep knowledge of Azure/AWS

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 7+ years of experience in cybersecurity, with a strong focus on data security.
• Hands-on experience with CASB solutions (e.g., Z Scaler, Microsoft Defender for Cloud Apps).
• Proven experience implementing and managing DSPM tools and frameworks.
• Deep expertise in Microsoft 365 security and compliance features.
• Strong understanding of cloud platforms (Azure/AWS preferred).
• Experience with DLP, data classification, encryption, and access controls.
• Familiarity with SIEM/SOAR tools (e.g., Sentinel, Splunk).
• Knowledge of identity and access management (IAM), including Zero Trust principles.

Responsibilities

• Architecture & Design across cloud and on-prem environments.
• CASB Management and governance.
• DSPM implementation and ongoing optimization.
• Microsoft 365 Security configuration and monitoring.
• Threat detection, incident response, and forensics.
• Compliance & governance across data protection programs.

Skills

CASB expertise

DSPM implementation

Microsoft 365 security

Cloud security (Azure/AWS)

DLP & data protection

IAM & Zero Trust

SIEM/SOAR

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Z Scaler

Microsoft Defender for Cloud Apps

Sentinel

Splunk

Entra ID

Job description

Job Classification:

Technology - Engineering & Cloud

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takesgreat pridein our culture where digital transformation is built into our DNA! When you join our organization at Prudential,you’llunlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.

Your Team & Role

We are seeking a highly skilled Lead Infrastructure Security Engineer with deep expertise in Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), and Microsoft 365 (O365) data security technologies. This role is responsible for designing, implementing, and maintaining data protection strategies across cloud and SaaS environments by leveraging Z Scaler. Ideal candidate should have a strong focus on safeguarding sensitive data, ensuring regulatory compliance, and mitigating insider and external threats.

Here is What You Can Expect on a Typical Day

• Architecture & Design
• CASB Management
• DSPM Implementation
• Microsoft 365 Security
• Threat Detection & Incident Response
• Compliance & Governance

The Skills &ExpertiseYou Bring

Required Qualifications

• Bachelor’s degree in: Computer Science, Information Security, or a related field (or equivalent experience).
• 7+ years of experience in cybersecurity, with a strong focus on data security.
• Hands-on experience with CASB solutions (e.g., Z Scaler, Microsoft Defender for Cloud Apps, etc….).
• Proven experience implementing and managing DSPM tools and frameworks.
• Deep expertise in Microsoft 365 security and compliance features.
• Strong understanding of cloud platforms (Azure/ AWS preferred).
• Experience with DLP, data classification, encryption, and access controls.
• Familiarity with SIEM/SOAR tools (e.g., Sentinel, Splunk).
• Knowledge of identity and access management (IAM), including Zero Trust principles.

Preferred Qualifications

• Experience with Z Scaler for CASB, DSPM and DLP functions
• Experience with Azure / AWS to design the appropriate security controls
• Experience with Splunk and Entra ID
• Relevant certifications (e.g., CISSP, CCSP, Microsoft Security certifications).
• Experience with automation and scripting (PowerShell, Python).
• Knowledge of API integrations and security orchestration.
• Experience in highly regulated industries (finance, healthcare, etc.).

You’llLove Working Here Because You Can

Join a team and culture where your voice matters; where every day, your work transforms our experiences to make lives better. As you put your skills to use,we’llhelp you make an even bigger impact with learning experiences that can grow your technical AND leadership capabilities.You’llbe surprised by what this rock-solid organization has in store for you.

What we offer you:

Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $133,600.00 to $220,400.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.

• Market competitive base salaries, with a yearly bonus potential at every level.
• Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
• 401(k) plan with company match (up to 4%).
• Company-funded pension plan.
• Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
• Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
• Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
• Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period), after one year of service.

Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit Work Life Balance | Prudential Careers.

Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.

Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.

If you need an accommodation to complete the application process, please email [e-mail].

If you are experiencing a technical issue with your application or an assessment, please email [e-mail] to request assistance.