Lead, Infrastructure Security Engineer - CASB and DSPM

Prudential Financial; Newark (NJ); On-site; USD 133,600 - 220,400; Full time

Benefits offered by this job

Competitive base salary

Yearly bonus potential

401(k) plan with company match

Medical, dental, vision insurance

Paid Time Off

Job summary

A leading financial services company is seeking a cybersecurity expert to design and implement data security solutions. The ideal candidate will have over 7 years of experience in data security, hands-on experience with CASB solutions, and a solid understanding of cloud platforms. This role involves creating secure architectures, monitoring for data exfiltration, and ensuring compliance with regulatory frameworks. Benefits include a competitive salary, 401(k) plan, and employee wellness programs.

Qualifications

• 7+ years of experience in cybersecurity, focusing on data security.
• Hands-on experience with CASB solutions and DSPM tools.
• Strong understanding of cloud platforms like Azure and AWS.

Responsibilities

• Design and implement enterprise-wide data security solutions.
• Create secure architectures for SaaS, IaaS, and PaaS environments.
• Monitor user activity and detect anomalies for data protection.

Skills

Cybersecurity

Data security

Cloud platforms

CASB solutions

Microsoft 365 security

Encryption

Automation and scripting

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Z Scaler

Splunk

Azure

Microsoft Defender for Cloud Apps

PowerShell

Job description

Responsibilities

• Design and implement enterprise-wide data security solutions leveraging CASB, DSPM, Microsoft 365 security capabilities, preferably with Z Scaler.
• Create secure architectures for SaaS, IaaS, and PaaS environments with a focus on data visibility and protection.
• Deploy, configure, and optimize CASB solutions to enforce security policies across cloud applications (introspection, shadow IT discovery).
• Monitor user activity, detect anomalies, and prevent data exfiltration.
• Integrate CASB with identity providers (e.g., Entra / Azure AD) and SIEM/SOAR platforms (e.g., Splunk).
• Lead implementation and operationalization of DSPM tools to discover, classify, and monitor sensitive data across environments.
• Establish data classification frameworks and automate data risk assessments.
• Provide continuous visibility into data exposure, access risks, and compliance gaps.
• Integrate Microsoft CoPilot and Z Scaler or similar CASB/DSPM products.
• Administer and enhance Microsoft 365 security controls (sensitivity labels, insider risk management, Microsoft Defender for Cloud Apps).
• Secure Exchange Online, SharePoint Online, OneDrive, and Teams environments.
• Investigate security alerts related to data access, sharing, and exfiltration.
• Collaborate with SOC and Incident Response teams to remediate threats.
• Develop detection rules and automated response workflows.
• Ensure alignment with regulatory frameworks (GDPR, HIPAA, CCPA).
• Support audits and compliance reporting related to data security controls.
• Define and enforce data governance policies and standards.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 7+ years of experience in cybersecurity, with a strong focus on data security.
• Hands‑on experience with CASB solutions (Z Scaler, Microsoft Defender for Cloud Apps, etc.).
• Proven experience implementing and managing DSPM tools and frameworks.
• Deep expertise in Microsoft 365 security and compliance features.
• Strong understanding of cloud platforms (Azure/AWS).
• Experience with DLP, data classification, encryption, and access controls.
• Familiarity with SIEM/SOAR tools (Sentinel, Splunk).
• Knowledge of identity and access management (IAM) and Zero Trust principles.

Preferred Qualifications

• Experience with Z Scaler for CASB, DSPM, and DLP functions.
• Experience designing security controls in Azure/AWS.
• Experience with Splunk and Entra ID.
• Relevant certifications (CISSP, CCSP, Microsoft Security certifications).
• Experience with automation and scripting (PowerShell, Python).
• Knowledge of API integrations and security orchestration.
• Experience in highly regulated industries (finance, healthcare, etc.).

Benefits

• Salary range: $133,600.00 to $220,400.00 (adjusted for location and experience).
• Competitive base salary with yearly bonus potential.
• Medical, dental, vision, life insurance, and disability insurance.
• Paid Time Off (PTO) and leave of absences (parental, military).
• 401(k) plan with company match up to 4%.
• Company‑funded pension plan.
• Wellness programs (up to $1,600 annually for wellbeing items).
• Work/life resources supporting parenting, housing, senior care, finances, pets, legal matters, education, emotional/mental health, and career development.
• Education benefits for college or accredited certificate programs.
• Employee Stock Purchase Plan (85% of lower of two prices after 1 year).

Equal Opportunity Employer

Prudential is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition, or any other characteristic protected by law.