> Markdown version of [/jobs/ext/1906331-lead-infrastructure-security-engineer-casb-and-dspm](https://www.wearedevelopers.com/jobs/ext/1906331-lead-infrastructure-security-engineer-casb-and-dspm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead, Infrastructure Security Engineer - CASB and DSPM - **Company:** Prudential Financial, Inc. - **Location:** Newark, NJ, United States - **Experience:** Expert - **Salary:** $133,600.0 - $220,400.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Data Governance, Data Security, Infrastructure as a Service (IaaS), Identity and Access Management, Information Security Management, Information Systems Security Architecture Professional, Python (Programming Language), Microsoft Security Essentials, Platform as a Service (PAAS), Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Microsoft SharePoint, Security Information and Event Management, Data Classification, Microsoft Power Automate, Office365, Information Technology, Splunk, Api Management - **Published:** August 3, 2026 - **Apply:** https://www.disabledperson.com/jobs/73968962-lead-infrastructure-security-engineer-casb-and-dspm ## About the Role * Bachelor's degree in: Computer Science, Information Security, or a related field (or equivalent experience). * 7+ years of experience in cybersecurity, with a strong focus on data security. * Hands-on experience with CASB solutions (e.g., Z Scaler, Microsoft Defender for Cloud Apps, etc....). * Proven experience implementing and managing DSPM tools and frameworks. * Deep expertise in Microsoft 365 security and compliance features. * Strong understanding of cloud platforms (Azure/ AWS preferred). * Experience with DLP, data classification, encryption, and access controls. * Familiarity with SIEM/SOAR tools (e.g., Sentinel, Splunk). * Knowledge of identity and access management (IAM), including Zero Trust principles. Preferred Qualifications * Experience with Z Scaler for CASB, DSPM and DLP functions * Experience with Azure / AWS to design the appropriate security controls * Experience with Splunk and Entra ID * Relevant certifications (e.g., CISSP, CCSP, Microsoft Security certifications). * Experience with automation and scripting (PowerShell, Python). * Knowledge of API integrations and security orchestration. * Experience in highly regulated industries (finance, healthcare, etc.). ## Description We are seeking a highly skilled Lead Infrastructure Security Engineer with deep expertise in Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), and Microsoft 365 (O365) data security technologies. This role is responsible for designing, implementing, and maintaining data protection strategies across cloud and SaaS environments by leveraging Z Scaler. Ideal candidate should have a strong focus on safeguarding sensitive data, ensuring regulatory compliance, and mitigating insider and external threats. Here is What You Can Expect on a Typical Day * Architecture & Design + Design and implement enterprise-wide data security solutions leveraging CASB, DSPM, and Microsoft 365 security capabilities preferably with Z Scaler + Develop secure architectures for SaaS, IaaS, and PaaS environments with a focus on data visibility and protection. * CASB Management + Deploy, configure, and optimize CASB solutions to enforce security policies across cloud applications (introspection, shadow IT discovery) + Monitor user activity, detect anomalies, and prevent data exfiltration. + Integrate CASB with identity providers (e.g., Entra / Azure AD) and SIEM/SOAR (e.g., Splunk) platforms. * DSPM Implementation + Lead the implementation and operationalization of DSPM tools to discover, classify, and monitor sensitive data across environments. + Establish data classification frameworks and automate data risk assessments. + Provide continuous visibility into data exposure, access risks, and compliance gaps. + Integrate Microsoft CoPilot and Z Scaler or similar CASB / DSPM products * Microsoft 365 Security + Administer and enhance Microsoft 365 security controls, including: o Sensitivity labels and information protection o Insider Risk Management o Microsoft Defender for Cloud Apps + Secure Exchange Online, SharePoint Online, OneDrive, and Teams environments. * Threat Detection & Incident Response + Investigate security alerts related to data access, sharing, and exfiltration. + Collaborate with SOC and Incident Response teams to remediate threats. + Develop detection rules and automated response workflows. * Compliance & Governance + Ensure alignment with regulatory frameworks (e.g., GDPR, HIPAA, CCPA). + Support audits and compliance reporting related to data security controls. + Define and enforce data governance policies and standards. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)