Lead Infrastructure Security Engineer, CASB and DSPM

What you'll do

• Design and implement enterprise-wide data security solutions using CASB, DSPM, and Microsoft 365.
• Deploy and optimize CASB solutions to enforce security policies and discover shadow IT.
• Lead the implementation of DSPM tools to discover, classify, and monitor sensitive data.
• Administer Microsoft 365 security controls including sensitivity labels and information protection.
• Investigate security alerts related to data access, sharing, and exfiltration.
• Develop detection rules and automated response workflows for threat remediation.
• Ensure data security alignment with regulatory frameworks like GDPR, HIPAA, and CCPA.
• Define and enforce corporate data governance policies and standards.

What we're looking for

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• 7+ years of experience in cybersecurity with a strong focus on data security.
• Hands-on experience with CASB solutions such as Z Scaler or Microsoft Defender for Cloud Apps.
• Proven experience implementing and managing DSPM tools and frameworks.
• Deep expertise in Microsoft 365 security and compliance features.
• Experience with DLP, data classification, encryption, and access controls.
• Familiarity with SIEM/SOAR tools like Sentinel or Splunk.
• Knowledge of identity and access management (IAM) and Zero Trust principles.
• Experience with Z Scaler for CASB, DSPM, and DLP functions (preferred).
• Experience with Azure or AWS to design security controls (preferred).
• Experience with Splunk and Entra ID (preferred).
• Relevant certifications such as CISSP, CCSP, or Microsoft Security certifications (preferred).
• Experience with automation and scripting using PowerShell or Python (preferred).
• Knowledge of API integrations and security orchestration (preferred).
• Experience in highly regulated industries such as finance or healthcare (preferred).