Data Protection Specialist

Data Protection Security Engineer – Netskope Lead

Foster City, CA | 3 days in office

Contract Role

Job Descriptio

nMy client is seeking an experienced and skilled Security Engineer to serve as the technical lead for the enterprise implementation, configuration, and ongoing management of Netskope Next-Generation Secure Web Gateway (NG SWG) and Network Private Access (NPA). This individual will own the end-to-end deployment lifecycle of these platforms and will be the primary driver for developing, implementing, and testing Data Loss Prevention (DLP) policies across the organization. The ideal candidate brings deep hands-on expertise with Netskope, a strong understanding of zero-trust network access principles, and a proven track record of building effective DLP programs in complex enterprise environments

.

Key Responsibilities

:In this role, you will be responsible for the end-to-end administration and health of the Netskope tenant, ensuring that all deployed products are correctly configured, consistently enforced, and aligned with client's security policies and risk posture. You will manage the NG SWG to inspect, control, and secure web traffic across the enterprise, leveraging Skope AI's threat intelligence and behavioral analytics to detect and respond to anomalous activity in real time. You will be expected to build and maintain SSL inspection policies, URL filtering categories, threat protection profiles, and Cloud app controls with a clear understanding of how these layers interact

.
· Netskope NG SWG Implementation & Manageme

ntØ Lead the full lifecycle deployment of Netskope NG SWG, including architecture design, tenant configuration, traffic steering, and integration with existing security infrastructu

reØ Configure and maintain SSL/TLS inspection, URL filtering, cloud application controls, and threat protection polici

esØ Integrate Netskope with identity providers (e.g., Okta, Azure AD) for user-based policy enforceme

ntØ Manage Netskope client deployment across endpoints in coordination with endpoint and IT tea

msØ Establish and maintain logging, alerting, and reporting pipelines from the Netskope platform into SIEM too

ls · Netskope NPA Implementation & Manageme

ntØ Lead the design and deployment of Netskope NPA to replace or supplement traditional VPN infrastructure, enabling zero-trust application acce

ssØ Define publisher placement, application segmentation, and access policies aligned to least-privilege principl

esØ Collaborate with application owners and IT teams to onboard private applications to the NPA framewo

rkØ Continuously evaluate and refine NPA policies based on access patterns and security posture requiremen

ts · DLP Policy Development & Testi

ngØ Develop a comprehensive DLP strategy covering web, cloud, and private application traffic traversing the Netskope platfo

rmØ Create, tune, and maintain DLP profiles and policies for sensitive data categories including PII, PHI, PCI, intellectual property, and other regulated or confidential data typ

esØ Conduct structured DLP policy testing using representative data samples to validate detection accuracy and minimize false positiv

esØ Establish a formal policy review and tuning cadence in partnership with Legal, Compliance, and Data Governance tea

msØ Investigate and respond to DLP policy alerts, escalating incidents per established procedur

es · Stakeholder Collaboration & Documentati

onØ Serve as the subject matter expert for Netskope NG SWG, NPA, and DLP across security, IT, and business tea

msØ Produce and maintain architecture diagrams, runbooks, policy documentation, and operational procedur

esØ Provide guidance and knowledge transfer to junior engineers and security operations sta

ffØ Engage with Netskope TAM and support resources to stay current on platform capabilities and roadm

ap
Required Qualificatio

ns:· 8+ years of experience in network security, cloud security, or information security engineer

ing· 2+ years of hands-on experience deploying and managing Netskope NG SWG and/or NPA in an enterprise environm

ent· Demonstrated experience developing and managing DLP policies, including policy design, testing, and tun

ing· Strong understanding of zero-trust network access (ZTNA) concepts and architectu

res· Proficiency with SSL/TLS inspection, proxy architectures, and cloud access security broker (CASB) functional

ity· Working knowledge of identity and access management platforms (Okta, Azure AD, SAML, SC

IM)· Familiarity with regulatory frameworks relevant to DLP (HIPAA, PCI-DSS, GDPR, CCPA, et

c.)· Strong analytical and troubleshooting skills with the ability to work through complex network and policy iss

u

es Preferred Qualificatio

ns:· Netskope One Professional or equivalent Netskope certificat

ion· Experience integrating Netskope with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, et

c.)· Background in endpoint security, SASE architecture, or broader SSE framework implementat

ion· Experience with scripting or automation (Python, PowerShell) for policy management or log analy

sis· Familiarity with additional DLP tools or platforms beyond Netsk

o

pe Educati

on:· Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field — or equivalent hands-on experience in lieu of a deg

r

ee Preferred Certificatio

ns:· CISSP, CCSP (ISC²), CISM or equivalent security certificat

ion· CompTIA Security+ or Netwo