Senior Cybersecurity Engineer

Clayco; St. Louis (MO); On-site; USD 120,000 - 180,000; Full time

Job summary

Clayco is seeking a Sr. Cybersecurity Engineer to lead DLP and CASB engineering, operation, and optimization within the SOC. You will implement, maintain, and integrate data-protection controls across on-prem and cloud environments, partnering with GRC and business units to meet regulatory requirements.

The role requires 6–8 years in information security, hands-on DLP/CASB experience, and strong scripting abilities. Travel regionally and participate in 24/7 incident response as needed.

Qualifications

• Bachelor’s degree in cybersecurity, CS, or IT, or equivalent work experience.
• CCSP or CSA CCSK certification (current or within 6 months).
• 6–8 years of technical work experience in information security.
• 3–5 years in cybersecurity operations with hands-on DLP/CASB admin and engineering.
• Experience with scripting languages (Python, PowerShell, Bash).
• Experience in cloud (Azure, AWS, GCP) and enterprise client-server environments.
• Strong communication and ability to document requirements and KPIs.
• Willingness to respond to incidents 24/7 and thrive in a fast-paced setting.

Responsibilities

• Contribute to Incident Response efforts as needed.
• Manage access controls, policies, and rules for security gateways and CASB connections.
• Operate and optimize DLP and CASB solutions across endpoints, networks, and cloud apps.
• Develop data-risk reports, policy scans, and compliance scorecards.
• Design, test, and tune DLP detection rules and data classification policies.
• Triages, investigates, and resolves DLP/CASB alerts with cross-functional teams.
• Mentor SOC analysts and coordinate with vendor support for product updates.

Skills

Security Operations

Incident Response

Communication skills

Mentoring/leadership

Scripting proficiency

Education

Bachelor's Degree in Cybersecurity, CS, or IT

CCSP or CSA CCSK cert

Tools

DLP solutions

CASB platforms

Firewalls

WAF

SIEM/SOAR

Python

PowerShell

Bash

Job description

Clayco is a full-service, turnkey real estate development, master planning, architecture, engineering, and construction firm that safely delivers clients across North America the highest quality solutions on time, on budget, and above and beyond expectations. With $8.1 billion in revenue for 2025, Clayco specializes in the "art and science of building," providing fast track, efficient solutions for mission critical, industrial, life sciences, power & energy, aviation, commercial, institutional, residential and sports & entertainment related building projects.

The Role We Want You For

Under the direction of the SOC Manager, the Sr. Cybersecurity Engineer is a senior technical role focused primarily on the engineering, operation, and optimization of Clayco’s Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions, while also supporting the broader security control stack. The role is responsible for engineering effective, supportable, and sustainable control configurations to meet the design requirements and objectives of our security control solutions, including initial implementations, life-cycle management changes, and necessary integrations. Operation, oversight, gap remediation, and change management of the security control stack as a member of the SOC team will be included in the day-to-day responsibilities.

The Specifics of the Role

• As a member of the Cybersecurity Team, contributes however and whenever necessary to Incident Response efforts as circumstances dictate.
• Assists with management of access controls, policies, and rules configurations for firewalls, DNS Layer Security, Email Security & Fraud Defense, Web App Firewalls (WAF), as well as responds to operational issues for each.
• Operates the Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions to include their administration, maintenance, support, troubleshooting, and optimization of the solutions such as:
• Endpoint, Network, and Cloud/SaaS DLP Platforms
• Host-based DLP Agents and CASB Connectors
• Required Integrations (CASB, SaaS APIs, Identity Provider, SIEM/SOAR)
• Data Classification & Sensitive Data Discovery Inputs
• Conducts regularly scheduled and ad-hoc data discovery and policy scans across endpoints, network, and cloud/SaaS applications, ensuring that high-fidelity DLP and CASB detection data is successfully and reliably ingested into the Incident Management & Workflow Platform in coordination with GRC.
• Partners with GRC and business units to map data flows, classify sensitive data, and address data-protection gaps by aligning DLP and CASB policies with regulatory and contractual requirements (e.g., GDPR, CCPA, HIPAA, PCI-DSS) and deploying specialized controls (encryption, tokenization, blocking, or quarantine) as needed.
• Develops DLP and CASB incident reports, data-risk ratings, and compliance scorecards that define the current state of data exposure for Clayco’s environment.
• Designs, tests, and tunes DLP detection rules and data classification policies (e.g., PII, PCI, PHI, source code, financials, and confidential business data) to balance data protection with business productivity while minimizing false positives.
• Administers CASB controls for sanctioned and unsanctioned cloud applications, including Shadow IT discovery, application risk scoring, and enforcement of access, sharing, and data-residency policies.
• Triages, investigates, and resolves DLP and CASB alerts, coordinating with Incident Response, HR, and Legal on potential data exfiltration and insider-risk events.
• Maintains DLP and CASB policy, exception, and runbook documentation, and produces KRI/KPI metrics on data-loss events, policy violations, and remediation timelines.
• Understands and complies with Clayco’s Change Management process to ensure that change is justified, tested, approved, and communicated effectively.
• Serves as a senior technical resource and mentor on DLP and CASB matters, providing guidance to SOC analysts and junior engineers and representing the data-protection program in cross-functional initiatives.
• Interfaces with vendor support teams to keep abreast of developments in product lines.
• Performs other duties as assigned.

Requirements

• Bachelor’s Degree (Cybersecurity, Computer Science, or Information Technology) preferred, or equivalent work experience.
• Certified Cloud Security Professional (CCSP, (ISC)²), Cloud Security Alliance Certificate of Cloud Security Knowledge (CSA CCSK), or equivalent (current status or obtained within 6 months of assuming role).
• 6-8 years of technical work experience in Information Security.
• 3-5 years of direct work-related Cybersecurity Operations experience, including hands-on experience administering and engineering Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) solutions, as well as Security Control Engineering (firewalls, email security gateways, WAFs, etc.).
• Experience with scripting languages (Python, PowerShell, BASH, etc.).
• Understanding of malware, emerging threats, attacks, and vulnerability exploitation with a personal drive to continue learning.
• Experience in Enterprise Client-Server, Cloud (Azure, AWS, GCP), & IoT Hybrid environments and knowledge of how various technologies and processes interact and behave.
• Knowledge of secure network/systems configuration management as well as an understanding of networking protocols, concepts, and devices.
• Excellent oral and written communication skills, including the ability to document functional requirements, test and validation criteria, communication plans, KRI/KPI reports, and other relevant operational communications.
• Ability to respond to incidents or outages 24/7, including holidays and weekends.
• Ability to thrive in a fast-paced environment.

Some Things You Should Know

• This position will service our clients regionally.
• Our clients and projects are nationwide - Travel will be required.
• No other builder can offer the collaborative design-build approach that Clayco does.
• We work on creative, complex, award-winning, high-profile jobs.
• The pace is fast!
• This position is classified as a safety-sensitive role in accordance with applicable state and federal laws. Candidates selected for this position will be subject to a comprehensive background check, which includes mandatory drug testing.

Why Clayco?

• 2025 Best Places to Work – St. Louis Business Journal, Los Angeles Business Journal, and Phoenix Business Journal.
• 2025 ENR Top 400 – Top Data Center Contractor (Top 3).
• 2025 ENR Top 100 Design-Build Firms – Design-Build Contractor (Top 5).
• Discretionary Annual Bonus: Subject to company and individual performance.
• Comprehensive Benefits Package Including: Medical, dental and vision plans, 401k, generous PTO and paid company holidays, employee assistance program, flexible spending accounts, life insurance, disability coverage, learning & development programs and more!

Compensation

• The salary range for this position considers a wide range of factors in making compensation decisions including but not limited to: Education, qualifications, skills, training, experience, certifications, internal equity, and location. Compensation decisions are dependent on the facts and circumstances of each case.