Data Protection Security Engineer - Netskope

About The Role Onsite in Foster City, CA | at least 3 days in office Zoox is seeking an experienced and skilled Security Engineer to serve as the technical lead for the enterprise implementation, configuration, and ongoing management of Netskope Next-Generation Secure Web Gateway (NG SWG) and Network Private Access (NPA). This individual will own the end-to-end deployment lifecycle of these platforms and will be the primary driver for developing, implementing, and testing Data Loss Prevention (DLP) policies across the organization. The ideal candidate brings deep hands‑on expertise with Netskope, a strong understanding of zero‑trust network access principles, and a proven track record of building effective DLP programs in complex enterprise environments. Key Responsibilities Design, deploy, and manage Netskope NG SWG to inspect, control, and secure web traffic across the enterprise, leveraging Skope AI threat intelligence and behavioral analytics. Build and maintain SSL/TLS inspection policies, URL filtering categories, threat protection profiles, and cloud app controls. Integrate Netskope with identity providers (e.g., Okta, Azure AD) for user‑based policy enforcement. Manage Netskope client deployment across endpoints in coordination with endpoint and IT teams. Establish and maintain logging, alerting, and reporting pipelines from Netskope into SIEM tools. Lead the design and deployment of Netskope NPA to replace or supplement traditional VPN infrastructure, enabling zero‑trust application access. Define publisher placement, application segmentation, and access policies aligned to least‑privilege principles. Collaborate with application owners and IT teams to onboard private applications to the NPA framework. Continuously evaluate and refine NPA policies based on access patterns and security posture. Develop a comprehensive DLP strategy covering web, cloud, and private application traffic traversing the Netskope platform. Create, tune, and maintain DLP profiles and policies for sensitive data categories including PII, PHI, PCI, intellectual property, and other regulated data types. Conduct structured DLP policy testing using representative data samples to validate detection accuracy and minimize false positives. Establish a formal policy review and tuning cadence in partnership with Legal, Compliance, and Data Governance teams. Investigate and respond to DLP policy alerts, escalating incidents per established procedures. Serve as the subject‑matter expert for Netskope NG SWG, NPA, and DLP across security, IT, and business teams. Produce and maintain architecture diagrams, runbooks, policy documentation, and operational procedures. Provide guidance and knowledge transfer to junior engineers and security operations staff. Engage with Netskope TAM and support resources to stay current on platform capabilities and roadmap. Required Qualifications 8+ years of experience in network security, cloud security, or information security engineering. 2+ years of hands‑on experience deploying and managing Netskope NG SWG and/or NPA in an enterprise environment. Demonstrated experience developing and managing DLP policies, including policy design, testing, and tuning. Strong understanding of zero‑trust network access (ZTNA) concepts and architectures. Proficiency with SSL/TLS inspection, proxy architectures, and cloud access security broker (CASB) functionality. Working knowledge of identity and access management platforms (Okta, Azure AD, SAML, SCIM). Familiarity with regulatory frameworks relevant to DLP (HIPAA, PCI‑DSS, GDPR, CCPA, etc.). Strong analytical and troubleshooting skills with the ability to work through complex network and policy issues. Preferred Qualifications Netskope One Professional or equivalent Netskope certification. Experience integrating Netskope with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, etc.). Background in endpoint security, SASE architecture, or broader SSE framework implementation. Experience with scripting or automation (Python, PowerShell) for policy management or log analysis. Familiarity with additional DLP tools or platforms beyond Netskope. Education Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field — or equivalent hands‑on experience in lieu of a degree. Preferred Certifications CISSP, CCSP (ISC²), CISM or equivalent security certification. CompTIA Security+ or Network+. Technical Skills Netskope (NG SWG / NPA) Platform SASE / SSE Frameworks CASB Functionality Okta / Azure AD (IAM)

SAML / SCIM

SIEM (Splunk / Microsoft Sentinel) Python / PowerShell Scripting Automation / API Integration SSL/TLS Inspection Proxy Architecture Threat Intelligence (Skope AI) Log Analytics Industry Experience Enterprise Cloud Security Network Security Zero Trust Architecture Data Loss Prevention (DLP) Security Operations Center (SOC) SASE / SSE Implementation Secure Web Gateway (SWG) Private Application Access (NPA) #J-18808-Ljbffr O2 Technologies