> Markdown version of [/jobs/ext/548385-cloud-security-engineer-netskope](https://www.wearedevelopers.com/jobs/ext/548385-cloud-security-engineer-netskope). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer-Netskope - **Company:** Denken Solutions - **Location:** Foster City, CA, United States - **Experience:** Experienced - **Salary:** $176,800.0 - $208,000.0 - **Contract:** Temporary contract - **Skills:** Access Network, Artificial Intelligence, Software as a Service, Cloud Computing, Cloud Computing Security, Complex Networks, CompTIA Security+, Cyber Security, Data Governance, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Log Analysis, PCI Data Security Standards, Performance Tuning, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Web Application Security, Security Information and Event Management, Systems Integration, Data Logging, Scripting, Transport Layer Security, Okta, Information Technology, Microsoft Sentinel, Splunk - **Published:** June 11, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=94d4c1065149725f ## About the Role Do you have experience in Zero trust architecture design?, Do you have a Bachelor's degree?, The ideal candidate is a hands-on security engineer with deep Netskope expertise who can independently lead enterprise-wide NG SWG, NPA, and DLP initiatives while partnering effectively with security, networking, infrastructure, compliance, and business stakeholders. Experience with Zero Trust architectures, DLP policy development, and enterprise-scale Security deployments is essential., * 8+ years of experience in network security, cloud security, or information security engineering * 2+ years of hands-on experience deploying and managing Netskope NG SWG and/or NPA in an enterprise environment * Demonstrated experience developing and managing DLP policies, including policy design, testing, and tuning * Strong understanding of zero-trust network access (ZTNA) concepts and architectures * Proficiency with SSL/TLS inspection, proxy architectures, and cloud access security broker (CASB) functionality * Working knowledge of identity and access management platforms (Okta, Azure AD, SAML, SCIM) * Familiarity with regulatory frameworks relevant to DLP (HIPAA, PCI-DSS, GDPR, CCPA, etc.) * Strong analytical and troubleshooting skills with the ability to work through complex network and policy issues Preferred Qualifications: * Netskope One Professional or equivalent Netskope certification * Experience integrating Netskope with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, etc.) * Background in endpoint security, SASE architecture, or broader SSE framework implementation * Experience with scripting or automation (Python, PowerShell) for policy management or log analysis * Familiarity with additional DLP tools or platforms beyond Netskope Education: * Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field - or equivalent hands-on experience in lieu of a degree Preferred Certifications: * CISSP, CCSP (ISC²), CISM or equivalent security certification * CompTIA Security+ or Network+ ## Description In this role, you will be responsible for the end-to-end administration and health of the Netskope tenant, ensuring that all deployed products are correctly configured, consistently enforced, and aligned with the client's security policies and risk posture. You will manage the NG SWG to inspect, control, and secure web traffic across the enterprise, leveraging Skope AI's threat intelligence and behavioral analytics to detect and respond to anomalous activity in real time. You will be expected to build and maintain SSL inspection policies, URL filtering categories, threat protection profiles, and Cloud app controls with a clear understanding of how these layers interact. * Netskope NG SWG Implementation & Management * Lead the full lifecycle deployment of Netskope NG SWG, including architecture design, tenant configuration, traffic steering, and integration with existing security infrastructure * Configure and maintain SSL/TLS inspection, URL filtering, cloud application controls, and threat protection policies * Integrate Netskope with identity providers (e.g., Okta, Azure AD) for user-based policy enforcement * Manage Netskope client deployment across endpoints in coordination with endpoint and IT teams * Establish and maintain logging, alerting, and reporting pipelines from the Netskope platform into SIEM tools * Netskope NPA Implementation & Management * Lead the design and deployment of Netskope NPA to replace or supplement traditional VPN infrastructure, enabling zero-trust application access * Define publisher placement, application segmentation, and access policies aligned to least-privilege principles * Collaborate with application owners and IT teams to onboard private applications to the NPA framework * Continuously evaluate and refine NPA policies based on access patterns and security posture requirements * DLP Policy Development & Testing * Develop a comprehensive DLP strategy covering web, cloud, and private application traffic traversing the Netskope platform * Create, tune, and maintain DLP profiles and policies for sensitive data categories, including PII, PHI, PCI, intellectual property, and other regulated or confidential data types * Conduct structured DLP policy testing using representative data samples to validate detection accuracy and minimize false positives * Establish a formal policy review and tuning cadence in partnership with Legal, Compliance, and Data Governance teams * Investigate and respond to DLP policy alerts, escalating incidents per established procedures * Stakeholder Collaboration & Documentation * Serve as the subject matter expert for Netskope NG SWG, NPA, and DLP across security, IT, and business teams * Produce and maintain architecture diagrams, runbooks, policy documentation, and operational procedures * Provide guidance and knowledge transfer to junior engineers and security operations staff * Engage with Netskope TAM and support resources to stay current on platform capabilities and roadmap ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)