Security Engineer - Netskope & SASE
Paramount Computer Systems
Role:Job Title: Security Engineer - Netskope & SASE
Location: UAE/Onsite
Role Type - FTE
Job Summary:
We are seeking a highly skilled L3 Information Security Engineer to design, implement, and maintain our enterprise security infrastructure. Your primary responsibility is driving our Secure Access Service Edge (SASE) strategy using Netskope. You will also lead a specialized technical team managing core endpoint, email, and vulnerability management platforms. Additionally, you will provide secondary engineering support for firewall assurance and cloud security posture management.
Key Responsibilities:
Primary Technical Engineering (SASE & Core Security):
SASE Architecture: Own the deployment, configuration, and continuous optimization of Netskope (CASB, SWG, ZTNA).
Policy Management: Design and enforce data loss prevention (DLP) and threat protection policies across cloud and web traffic.
L3 Escalation Support: Serve as the highest technical escalation point for complex SASE infrastructure issues.
Team Leadership & Platform Management:
Team Leadership: Lead and mentor a team of security engineers handling daily operations for endpoint, email, and vulnerability platforms.
Endpoint Protection (EPP/EDR): Oversee administration and incident response across Trend Micro Deep Security Manager (DSM), Symantec Endpoint Security, and CrowdStrike Falcon.
Vulnerability Management: Drive the enterprise vulnerability lifecycle utilizing Qualys, ensuring accurate scanning, prioritization, and reporting.
Email Security: Manage inbound/outbound threat protection, mail routing, and phishing mitigation strategies using Proofpoint.
Secondary Technical Responsibilities:
Firewall Assurance: Support network security auditing, compliance tracking, and policy optimization using AlgoSec.
Cloud Security (CNAPP/CSPM): Assist in securing multi-cloud environments by monitoring alerts and compliance postures via Palo Alto Prisma Cloud.
Job Requirements:
Experience & Education
Experience: Minimum 7–9 years in cybersecurity engineering, with at least 2–3 years in an L3 or team leadership role.
Education: Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or equivalent practical experience.
Technical Skills:
SASE: Deep technical expertise in Netskope implementation and traffic steering.
EDR/EPP: Hands-on mastery of CrowdStrike, Trend Micro DSM, and Symantec.
Vulnerability & Email: Proven experience with Qualys VMDR and Proofpoint Enterprise.
Network & Cloud Security: Solid foundational knowledge of AlgoSec and Palo Alto Prisma Cloud.
Core Networking: Strong understanding of TCP/IP, DNS, routing, SSL/TLS decryption, and API integrations.
Soft Skills:
Leadership: Proven ability to guide, train, and distribute workload among junior to mid-level engineers.
Communication: Ability to translate complex technical risks into clear business language for stakeholders.
Preferred Certifications:
Netskope Certified Cloud Security Administrator (NCCSA) / Integrator (NCCSI)
CrowdStrike Certified Falcon Administrator (CCFA) or Analyst (CCFA)
Qualys Certified Specialist
CISSP, CISM, or CEH