Foster City, United States
Data Protection Security Engineer - Netskope Lead - 8+ years
Continuum Resource Network · Foster City · United States
Posted: 8/12/2026 · Last checked: 10/12/2026
Job description
Quoted in full from Continuum Resource Network's job posting. Gavroche does not edit it.
We are helping an on-demand, autonomous ride-hailing company find a Data Protection Security Engineer – Netskope Lead to lead the enterprise implementation, administration, and optimization of Netskope security platforms, including Next-Generation Secure Web Gateway (NG SWG), Network Private Access (NPA), and Data Loss Prevention (DLP).
In this role, you’ll own the end-to-end deployment, configuration, and operational health of the Netskope environment while driving enterprise-wide DLP initiatives and zero-trust access strategies. You’ll partner closely with cross-functional teams to develop scalable security policies, strengthen cloud and web security controls, and protect sensitive organizational data.
The ideal candidate brings deep hands-on Netskope expertise, strong cloud and network security knowledge, and experience building and managing DLP programs within complex enterprise environments.
As a Data Protection Security Engineer – Netskope Lead, you'll:
- Lead the deployment, configuration, and ongoing administration of Netskope NG SWG and NPA platforms across the enterprise environment.
- Design and maintain security controls, including SSL/TLS inspection, URL filtering, cloud application controls, threat protection profiles, and traffic steering policies.
- Develop and implement zero-trust access strategies by configuring application segmentation, least-privilege access policies, and private application onboarding within Netskope NPA.
- Integrate Netskope with identity and access management platforms such as Okta, Azure AD, SAML, and SCIM for user-based policy enforcement.
- Manage Netskope client deployment and coordinate endpoint integrations with IT and endpoint engineering teams.
- Establish and maintain logging, monitoring, alerting, and reporting integrations with SIEM and security operations platforms.
- Develop and maintain enterprise DLP policies protecting sensitive data types, including PII, PHI, PCI, intellectual property, and other confidential information.
- Conduct DLP policy testing, tuning, and validation activities to improve detection accuracy and minimize false positives.
- Investigate and respond to DLP alerts, security events, and policy violations while supporting incident escalation processes.
- Partner cross-functionally with Legal, Compliance, Data Governance, Security, and Infrastructure teams to align policies with organizational security and regulatory requirements.
- Create and maintain architecture documentation, operational runbooks, and security procedures while providing guidance to junior engineers and operational teams.
- Serve as the subject matter expert for Netskope platforms, cloud security controls, and enterprise DLP strategy.
Requirements
Qualifications:
- 8+ years of experience in network security, cloud security, or information security engineering
- 2+ years of hands-on experience deploying and managing Netskope NG SWG and/or NPA in an enterprise environment
- Demonstrated experience developing and managing DLP policies, including policy design, testing, and tuning
- Strong understanding of zero-trust network access (ZTNA) concepts and architectures
- Proficiency with SSL/TLS inspection, proxy architectures, and cloud access security broker (CASB) functionality
- Working knowledge of identity and access management platforms (Okta, Azure AD, SAML, SCIM)
- Familiarity with regulatory frameworks relevant to DLP (HIPAA, PCI-DSS, GDPR, CCPA, etc.)
- Strong analytical and troubleshooting skills with the ability to work through complex network and policy issues
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field — or equivalent hands-on experience in lieu of a degree
Preferred Qualifications:
- Netskope One Professional or equivalent Netskope certification
- Experience integrating Netskope with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, etc.)
- Background in endpoint security, SASE architecture, or broader SSE framework implementation
- Experience with scripting or automation (Python, PowerShell) for policy management or log analysis
- Familiarity with additional DLP tools or platforms beyond Netskope
- Preferred Certifications: CISSP, CCSP (ISC²), CISM or equivalent security certification CompTIA Security+ or Network+
Benefits
401k
Life Insurance
Medical Insurance
Similar roles in Foster City
- Embedded Linux Security Engineer · ALTEN Technology USA, Foster City
- Cybersecurity Professional CROWS 7.49 · Credence
- Infrastructure Security Engineer - Bare Metal & Platform · SpaceXAI, Palo Alto
- Information Systems Security Engineer - Active TS/SCI with CI Poly · ENS Solutions, LLC, Washington
- Autonomous Security Engineer - Customer Solutions · Pensar, New York City
- ServiceNow IT Cybersecurity Specialist · Astor & Sanders, Fort Lee
200 open roles like this one; at most three per employer shown.
What security engineer adverts in the United States state
Middle half: 142,375 – 202,750 USD a year; median 170,000 USD.
From 294 adverts by 134 employers that state a salary, annualised.
How security engineer roles in the United States are worked
1% fully remote · 1% hybrid · 98% do not say
Of 92 adverts. An advert that does not state a work mode is counted as not saying, not as on-site.
Other roles at Continuum Resource Network
- Forward Deployed Engineer/Customer-Facing Software Engineer · New York City
- Software Engineer - 6+ years · San Diego
- System Integration and Test Engineer - 6-8 years · Foster City
- Customer Support - Rider Operations · Foster City
- Operations Support Specialist I - Readiness & Response · Miami
- Operations Support Specialist II - Readiness & Response · Miami
72 open.