Senior Cybersecurity Engineer

Clayco; Phoenix (AZ); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Discretionary Annual Bonus

Medical, Dental, Vision

401k

Generous PTO

Life Insurance

Learning & Development

Job summary

Clayco is seeking a Sr. Cybersecurity Engineer to lead the engineering, operation, and optimization of DLP and CASB solutions across the organization.

This senior role focuses on building scalable, secure configurations, implementing life cycle changes, and integrating tools within the SOC framework. The role includes policy administration, alert triage, data discovery, and collaboration with GRC and business units to map data flows and satisfy regulatory requirements (GDPR, CCPA, HIPAA,

Qualifications

• Bachelor’s Degree in Cybersecurity, CS, or IT preferred or equivalent work experience.
• 6–8 years of technical information security experience.
• 3–5 years in cybersecurity operations with DLP/CASB focus.
• Experience with scripting (Python/PowerShell/BASH).
• Experience across Azure/AWS/GCP and hybrid environments.

Responsibilities

• Engineer, operate, and optimize DLP and CASB solutions.
• Manage policies, alerts, data sources, and remediation for DLP/CASB.
• Tune detection rules and data classification policies (PII/PCI/PHI).
• Coordinate with Incident Response, HR, and Legal on sensitive events.
• Create data risk reports and compliance scorecards.
• Mentor SOC analysts and junior engineers.

Skills

Python

PowerShell

DLP/DAP engineering

CASB configuration

Incident response

Education

Bachelor’s Degree in Cybersecurity/CS/IT

Tools

DLP platforms

CASB tools

SIEM/SOAR

Firewalls & WAFs

Job description

The Role We Want You For

Under the direction of the SOC Manager, the Sr. Cybersecurity Engineer is a senior technical role focused primarily on the engineering, operation, and optimization of Clayco’s Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions, while also supporting the broader security control stack. The role is responsible for engineering effective, supportable, and sustainable control configurations to meet the design requirements and objectives of our security control solutions, including initial implementations, life-cycle management changes, and necessary integrations. Operation, oversight, gap remediation, and change management of the security control stack as a member of the SOC team will be included in the day-to-day responsibilities.

This role will oversee the Data Loss Prevention (DLP) & Cloud Access Security Broker (CASB) solutions for Clayco’s environment to include configuration and administration of applicable policies, alerts, data sources, and remediation of any misconfigurations. This role will also identify and remediate gaps across Clayco’s cybersecurity control set to include agent deployments, configuration changes, and tuning activities.

The Specifics of the Role

• As a member of the Cybersecurity Team, contributes however and whenever necessary to Incident Response efforts as circumstances dictate.
• Assists with management of access controls, policies, and rules configurations for firewalls, DNS Layer Security, Email Security & Fraud Defense, Web App Firewalls (WAF), as well as responds to operational issues for each.
• Operates the Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions to include their administration, maintenance, support, troubleshooting, and optimization of the solutions such as:
• Endpoint, Network, and Cloud/SaaS DLP Platforms
• Host-based DLP Agents and CASB Connectors
• Required Integrations (CASB, SaaS APIs, Identity Provider, SIEM/SOAR)
• Data Classification & Sensitive Data Discovery Inputs
• Conducts regularly scheduled and ad-hoc data discovery and policy scans across endpoints, network, and cloud/SaaS applications, ensuring that high-fidelity DLP and CASB detection data is successfully and reliably ingested into the Incident Management & Workflow Platform in coordination with GRC.
• Partners with GRC and business units to map data flows, classify sensitive data, and address data‑protection gaps by aligning DLP and CASB policies with regulatory and contractual requirements (e.g., GDPR, CCPA, HIPAA, PCI-DSS) and deploying specialized controls (encryption, tokenization, blocking, or quarantine) as needed.
• Develops DLP and CASB incident reports, data-risk ratings, and compliance scorecards that define the current state of data exposure for Clayco’s environment.
• Designs, tests, and tunes DLP detection rules and data classification policies (e.g., PII, PCI, PHI, source code, financials, and confidential business data) to balance data protection with business productivity while minimizing false positives.
• Administers CASB controls for sanctioned and unsanctioned cloud applications, including Shadow IT discovery, application risk scoring, and enforcement of access, sharing, and data‑residency policies.
• Triages, investigates, and resolves DLP and CASB alerts, coordinating with Incident Response, HR, and Legal on potential data exfiltration and insider‑risk events.
• Maintains DLP and CASB policy, exception, and runbook documentation, and produces KRI/KPI metrics on data-loss events, policy violations, and remediation timelines.
• Understands and complies with Clayco’s Change Management process to ensure that change is justified, tested, approved, and communicated effectively.
• Serves as a senior technical resource and mentor on DLP and CASB matters, providing guidance to SOC analysts and junior engineers and representing the data‑protection program in cross‑functional initiatives.
• Interfaces with vendor support teams to keep abreast of developments in product lines.
• Performs other duties as assigned.

Requirements

• Bachelor’s Degree (Cybersecurity, Computer Science, or Information Technology) preferred, or equivalent work experience.
• Certified Cloud Security Professional (CCSP, (ISC)²), Cloud Security Alliance Certificate of Cloud Security Knowledge (CSA CCSK), or equivalent (current status or obtained within 6 months of assuming role).
• 6-8 years of technical work experience in Information Security.
• 3-5 years of direct work‑related Cybersecurity Operations experience, including hands‑on experience administering and engineering Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions, as well as Security Control Engineering (firewalls, email security gateways, WAFs, etc.).
• Experience with scripting languages (Python, PowerShell, BASH, etc.).
• Understanding of malware, emerging threats, attacks, and vulnerability exploitation with a personal drive to continue learning.
• Experience in Enterprise Client-Server, Cloud (Azure, AWS, GCP), & IoT Hybrid environments and knowledge of how various technologies and processes interact and behave.
• Knowledge of secure network/systems configuration management as well as an understanding of networking protocols, concepts, and devices.
• Excellent oral and written communication skills, including the ability to document functional requirements, test and validation criteria, communication plans, KRI/KPI reports, and other relevant operational communications.
• Ability to respond to incidents or outages 24/7, including holidays and weekends.
• Ability to thrive in a fast‑paced environment.

Some Things You Should Know

• This position will service our clients regionally.
• Our clients and projects are nationwide - Travel will be required.
• No other builder can offer the collaborative design‑build approach that Clayco does.
• We work on creative, complex, award‑winning, high‑profile jobs.
• The pace is fast!
• This position is classified as a safety‑sensitive role in accordance with applicable state and federal laws. Candidates selected for this position will be subject to a comprehensive background check, which includes mandatory drug testing.

Why Clayco?

• 2025 Best Places to Work – St. Louis Business Journal, Los Angeles Business Journal, and Phoenix Business Journal.
• 2025 ENR Top 400 – Top Data Center Contractor (Top 3).
• 2025 ENR Top 100 Design‑Build Firms – Design‑Build Contractor (Top 5).
• Discretionary Annual Bonus: Subject to company and individual performance.
• Comprehensive Benefits Package Including: Medical, dental and vision plans, 401k, generous PTO and paid company holidays, employee assistance program, flexible spending accounts, life insurance, disability coverage, learning & development programs and more!

Compensation

• The salary range for this position considers a wide range of factors in making compensation decisions including but not limited to: Education, qualifications, skills, training, experience, certifications, internal equity, and location. Compensation decisions are dependent on the facts and circumstances of each case.