Staff Security Application Engineer

What you'll do

• Develop, implement, and optimize proxy and data loss prevention (DLP) solutions to protect sensitive data.
• Serve as the subject matter expert for proxy and DLP solutions to provide technical guidance to engineering teams.
• Deploy and integrate security solutions from vendors like Microsoft, Palo Alto, and Netskope into network environments.
• Collaborate with audit and compliance teams to ensure solutions meet regulatory requirements like PCI DSS and SOX.
• Design, implement, and test security controls to align with governance policies and compliance standards.
• Oversee the health, performance, and reliability of proxy and DLP systems while resolving technical issues.
• Advise the security operations team in investigating and responding to network security incidents.
• Develop and maintain technical documentation including architecture diagrams, operational procedures, and troubleshooting guides.

What we're looking for

• Candidates must independently possess the eligibility to work in the United States for any employer.
• A bachelor's degree in computer science, Information Technology, or a related technical field is typically required.
• Minimum of 8 years of progressive experience in network security engineering is typically required.
• Minimum of 5 years of experience in proxy and DLP solutions is typically required.
• Experience working in or with financial institutions with a strong understanding of regulatory and compliance requirements is required.
• Hands-on experience with Microsoft Defender, Palo Alto Prisma Access, and Netskope solutions is required.
• Deep knowledge of proxy protocols, DLP principles, firewall configuration, secure web gateways, and SASE architecture is required.
• Strong scripting skills in PowerShell or Python for automation and orchestration is required.
• Certifications such as CISSP, Palo Alto PCNSE, Microsoft SC-200, or Netskope NCCSA are preferred.
• Experience in environments transitioning from traditional proxy services to cloud-based solutions is preferred.
• Knowledge of compliance standards such as PCI DSS, NIST, ISO 27001, and NYDFS is preferred.