The role is primarily focused on administration and operational support of security platforms, with a heavy emphasis on Netskope.
Critical Requirement:
- Netskope Subject Matter Expertise (SME) is non-negotiable.
- Candidates must be capable of serving as effective platform administrators and deeply understand security policies within Netskope.
Responsibilities:
- Support Netskope as the primary platform.
- Administer and maintain security controls and fine-tune DLP policies.
- Investigate access-related platform issues and support ticket resolution.
- Work with feedback from the SOC team and manage policy adjustments to reduce false positives.
- Administer and optimize security platforms including Netskope (CASB/SSE), CyberArk EPM, Mimecast and others.
- Monitor, analyze, and respond to security events, ensuring timely triage and resolution.
- Develop, tune, and maintain security policies (DLP, web controls, email security, endpoint privilege management).
- Lead troubleshooting and root cause analysis for security incidents.
- Collaborate with engineering, IT, and business teams to implement security controls.
- Integrate security tools with ServiceNow for incident management and automated response.
- Build and maintain operational dashboards and reporting for security posture and KPIs.
- Support onboarding of new applications, users, and use cases.
- Contribute to security architecture decisions and continuous improvement of tooling and processes.
- Develop and maintain runbooks, standard operating procedures, and knowledge base documentation.
Requirements:
- Bachelor's degree or 5+ years of equivalent experience in Cybersecurity or related field.
- 7+ years of experience in security engineering or security operations roles.
- Strong hands-on experience with Netskope (CASB/SSE), CyberArk EPM, and Mimecast administration.
- Experience integrating and operating workflows within ServiceNow.
- Solid understanding of endpoint security, DLP, email security, and cloud security concepts.
- Experience tuning security tools to reduce false positives and improve detection fidelity.
- Familiarity with identity and access management concepts, including privilege management.
- Ability to analyze security events and translate findings into actionable remediation steps.
- Strong cross-functional collaboration and communication skills.
- Ability to manage multiple priorities and operate effectively in a fast-paced workplace.