Senior Infrastructure Security Engineer - CASB and DSPM

Prudential Financial•Newark, NJ

2d•$104,000 - $171,600

About The Position

Prudential is seeking a Senior Infrastructure Security Engineer to support the design, implementation, and operation of data security controls across cloud and SaaS environments. The role focuses on Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), and Microsoft 365 security technologies, preferably using Zscaler or similar products. The engineer will work with senior engineers to protect sensitive data, monitor cloud activity, support compliance initiatives, and develop hands-on expertise in modern data security practices. The position covers enterprise data-security architecture and design for SaaS, IaaS, and PaaS; CASB monitoring and policy support; cloud and SaaS data discovery and classification; Microsoft 365 security and compliance administration; and support for alert review, incident investigation, and response documentation. The role also collaborates with IT and compliance stakeholders and participates in knowledge-sharing and training.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience.
2–5 years of hands-on experience in CASB, DSPM, or cloud technologies, preferably with Zscaler.
Basic understanding of cloud computing and SaaS applications.
Familiarity with Microsoft 365, including Exchange Online, SharePoint, OneDrive, and Teams.
Strong analytical and problem-solving skills.
Good written and verbal communication skills.

Nice To Haves

Experience with Zscaler for CASB, DSPM, and DLP functions.
Experience with Azure or AWS to design appropriate security controls.
Experience with Splunk and Entra ID.
Relevant certifications, such as CISSP, CCSP, or Microsoft Security certifications.
Experience with automation and scripting, such as PowerShell or Python.
Knowledge of API integrations and security orchestration.

Responsibilities

Design and implement enterprise-wide data security solutions using CASB, DSPM, and Microsoft 365 security capabilities, preferably with Zscaler.
Develop secure architectures for SaaS, IaaS, and PaaS environments, focusing on data visibility and protection.
Create automated CASB monitoring alerts to identify risky user behavior and potential data exposure.
Help create, test, and enforce security policies across cloud applications.
Support data discovery and classification across cloud and SaaS environments.
Assist in maintaining data classification labels and policies in Microsoft Copilot.
Help identify data risks, including overexposure and improper access.
Assist with Microsoft 365 security and compliance features, including sensitivity labels and secure sharing policies for SharePoint, OneDrive, and Teams.
Review security alerts and logs related to data access and sharing.
Assist in investigating potential data security incidents, document findings, and contribute to incident response activities.
Work with senior engineers, IT teams, and compliance stakeholders.
Participate in knowledge-sharing sessions and training, and stay up to date on cloud security trends and tools.

Benefits

Market-competitive base salary with yearly bonus potential.
Medical, dental, vision, life, and disability insurance.
Paid Time Off (PTO) and leaves of absence, including parental and military leave.
401(k) plan with company match up to 4%.
Company-funded pension plan.
Wellness programs, including up to $1,600 per year in reimbursement for eligible personal wellbeing purchases.
Work/Life Resources for parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
Education Benefit for approved traditional college enrollment and accredited certificate programs.
Employee Stock Purchase Plan allowing shares to be purchased at 85% of the lower of the beginning or ending purchase-period price.
Discretionary annual incentive program eligibility, subject to program rules and applicable factors.