Lead Infrastructure Security Engineer
US$133,500 – US$220,500 / yr base salary
Posted 31 Jul 2026
Advertised as “Lead, Infrastructure Security Engineer - CASB and DSPM”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 7+ yrs
- Management level
- Individual contributor
- Contract
- Full-time
| Base salary | US$133,500 – US$220,500 / yr |
|---|
Field of studyInformation Security, Computer Science (or related)
Study levelBachelor's
Job Classification:
Technology - Engineering & Cloud
Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you’ll unlock an exciting and impactful career – all while growing your skills and advancing your profession at one of the world’s leading financial services institutions.
Your Team & Role
We are seeking a highly skilled Lead Infrastructure Security Engineer with deep expertise in Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), and Microsoft 365 (O365) data security technologies. This role is responsible for designing, implementing, and maintaining data protection strategies across cloud and SaaS environments by leveraging Z Scaler. Ideal candidate should have a strong focus on safeguarding sensitive data, ensuring regulatory compliance, and mitigating insider and external threats.
Here is What You Can Expect on a Typical Day
-
Architecture & Design
-
Design and implement enterprise-wide data security solutions leveraging CASB, DSPM, and Microsoft 365 security capabilities preferably with Z Scaler
-
Develop secure architectures for SaaS, IaaS, and PaaS environments with a focus on data visibility and protection.
-
-
CASB Management
-
Deploy, configure, and optimize CASB solutions to enforce security policies across cloud applications (introspection, shadow IT discovery)
-
Monitor user activity, detect anomalies, and prevent data exfiltration.
-
Integrate CASB with identity providers (e.g., Entra / Azure AD) and SIEM/SOAR (e.g., Splunk) platforms.
-
-
DSPM Implementation
-
Lead the implementation and operationalization of DSPM tools to discover, classify, and monitor sensitive data across environments.
-
Establish data classification frameworks and automate data risk assessments.
-
Provide continuous visibility into data exposure, access risks, and compliance gaps.
-
Integrate Microsoft CoPilot and Z Scaler or similar CASB / DSPM products
-
-
Microsoft 365 Security