Senior Infrastructure Security Engineer – CASB and DSPM

We are looking for a motivated Senior Infrastructure Security Engineer to support the design, implementation and operation of data security controls across cloud and SaaS environments. This role focuses on Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), and Microsoft 365 (O365) security technologies by leveraging Z Scaler or similar products.

You will work closely with senior engineers to help protect sensitive data, monitor cloud activity, and support compliance initiatives while building hands-on expertise in modern data security practices.

Key Responsibilities

• CASB Architectural and Design
• Design and implement enterprise-wide data security solutions leveraging CASB, DSPM, and Microsoft 365 security capabilities preferably with Z Scaler
• Develop secure architectures for SaaS, IaaS, and PaaS environments with a focus on data visibility and protection.
• CASB Operations Support
• Create automated monitoring alerts for CASB tools to identify risky user behavior and potential data exposure.
• Help create, test, and enforce security policies across cloud applications.
• DSPM Support
• Support data discovery and classification efforts across cloud and SaaS environments.
• Assist in maintaining data classification labels and policies in Microsoft Copilot
• Help identify data risks such as overexposure or improper access.
• Microsoft 365 Security Administration
• Assist in managing Microsoft 365 security and compliance features, including:
• Sensitivity labels from Microsoft CoPilot
• Secure sharing policies for SharePoint, OneDrive, and Teams
• Monitoring & Incident Response
• Review security alerts and logs related to data access and sharing.
• Assist in investigating potential data security incidents.
• Document findings and contribute to incident response activities.
• Collaboration & Learning
• Work closely with senior engineers, IT teams, and compliance stakeholders.
• Participate in knowledge-sharing sessions and training.
• Stay up to date on cloud security trends and tools.

The Skills & Expertise You Bring

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent experience).
• 2-5 years of hands on experience in CASB, DSPM or cloud technologies, preferably with Z Scaler.
• Basic understanding of cloud computing and SaaS applications.
• Familiarity with Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams).
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.

Preferred Qualifications

• Experience with Z Scaler for CASB, DSPM and DLP functions
• Experience with Azure / AWS to design the appropriate security controls
• Experience with Splunk and Entra ID
• Relevant certifications (e.g., CISSP, CCSP, Microsoft Security certifications).
• Experience with automation and scripting (PowerShell, Python).
• Knowledge of API integrations and security orchestration.