Casb

Casb Cybersecurity Jobs

2 jobs found

Today

Network Security Engineer

Legato Security Salt Lake City, UT

Salt Lake City, UT

Today

Full time Casb Cloud Firewall Cloud Platforms

Apply Now

Job Description

Legato Security is hiring a Network Security Engineer to help administer, implement, troubleshoot, design, and continuously improve customers’ network and security environments. The work spans day-to-day support and project delivery across multiple customers, blending operational ticket handling with implementation, migrations, upgrades, and configuration changes. This role is hybrid/mostly remote in Salt Lake City, UT, with some on-call time and occasional time in office or client visits as needed.

What you will do

Support, administer, configure, and troubleshoot firewalls, Zscaler services, Netskope, VPN technologies, and related network security platforms across internal and customer environments.
Partner with customers to understand business and technical requirements, troubleshoot issues, evaluate solution options, and implement appropriate changes.
Respond to and resolve service tickets, incidents, requests, and escalations related to network connectivity, firewalls, Zscaler, Netskope, and supporting technologies.
Act as an escalation point for technical problems requiring deeper troubleshooting, analysis, or specialized expertise beyond initial support.
Support firewall and network product environments to meet customer connectivity and security requirements.
Participate in firewall and SASE/SSE platform projects, including implementation, migration, upgrade, replacement, and configuration work for firewalls, Zscaler, and Netskope.
Assist with configuration and maintenance of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, and related services.
Assist with configuration and maintenance of Netskope One, including SASE, SSE, CASB, SWG, Private Access, Cloud Firewall, SD-WAN, and more.
Support Zscaler and Netskope policies, including URL filtering, firewall policies, SSL inspection, authentication and access policies, application access, routing, DNS, DHCP, NAT, VPNs, SSL/TLS inspection, VLANs, switching technologies, and policy enforcement.
Configure and troubleshoot VPN technologies including SSL VPN, IPsec, Remote Access VPN, and Site-to-Site VPN connections.
Review logs and diagnostic data such as firewall logs, Zscaler logs, Netskope logs, packet captures, routing tables, and traffic flows to determine root cause.
Assist with customer onboarding and changes, including testing and validation of new configurations prior to production deployment.
Create and maintain firewall documentation, configuration records, troubleshooting procedures, implementation notes, and customer-specific technical documentation.
Participate in incident response, problem management, and root-cause analysis when needed.
Manage multiple unresolved tickets, incidents, projects, and customer requests with support from team members or technical resources.
Assist other engineers and analysts with troubleshooting processes, technical methodologies, and network security best practices.
Identify opportunities to improve network configurations, security controls, operational processes, troubleshooting methods, documentation, and the customer experience.
Stay current on emerging networking and cybersecurity technologies, vendor platform changes, vulnerabilities, security capabilities, and industry best practices.

Requirements

Hands-on experience with one or more network security technologies such as firewalls, Zscaler, Netskope, VPNs, secure web gateways, SSE/SASE platforms, proxies, or zero-trust technologies.
Strong troubleshooting and analytical skills to diagnose network and security issues methodically.
Working knowledge of routing concepts and protocols including TCP/IP, BGP, OSPF, EIGRP, IS-IS, RIP, static routing, and SD-WAN.
Working knowledge of LAN technologies such as Ethernet switching, VLANs, Spanning Tree Protocol (STP), port security, link/port aggregation, and LAN/WAN architecture.
Experience or familiarity with physical, virtual, and cloud firewall technologies.
Understanding of firewall concepts including security policies, zones and interfaces, objects/object groups, routing, NAT, VPNs, application and service policies, logging, and traffic analysis.
Knowledge or familiarity of VPN technologies including IPsec, SSL VPN, Remote Access VPN, and Site-to-Site VPN.
Working knowledge of NAT concepts such as Source NAT, Destination NAT, and U-Turn/Hairpin NAT, plus DNS and DHCP.
Familiarity with authentication and identity technologies such as SAML, SSO, MFA, Active Directory, Entra ID, and SCIM.
Ability to capture, analyze, and interpret network traffic using Wireshark or similar tools.
Ability to interpret network and security logs, packet captures, routing information, and error messages.
Design and documentation experience would be helpful.
Strong customer-facing skills, including listening, evaluating requirements, asking appropriate questions, and explaining technical issues and solutions.
Effective communication with both technical and non-technical audiences.
Ability to work in team environments and independently.
Ability to handle multiple customers, environments, projects, incidents, and priorities simultaneously.
Ability to manage time effectively and work issues through to resolution.
Willingness and ability to learn new technologies and build deeper expertise across networking and network security platforms.

Technologies you will work with

Firewalls; Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, Zscaler Digital Experience (ZDX), Zscaler Cloud Firewall, Zscaler Data Loss Prevention (DLP), and Zscaler traffic forwarding technologies; Zscaler API integrations and automation
Netskope; Netskope One (SASE, SSE, CASB, SWG, Private Access, Cloud Firewall); SD-WAN; SkopeAI
VPN technologies including SSL VPN, IPsec, Remote Access VPN, and Site-to-Site VPN connections
TCP/IP, BGP, OSPF, EIGRP, IS-IS, RIP, Static Routing
Ethernet switching, VLANs, Spanning Tree Protocol (STP), Port security, Link/port aggregation
NAT (Source NAT, Destination NAT, U-Turn/Hairpin NAT), DNS, DHCP
Authentication and identity: SAML, SSO, MFA, Active Directory, Entra ID, SCIM
Wireshark and packet captures; SSL inspection and SSL/TLS inspection

Benefits

Start-up company in a growth phase with opportunity for advancement based on performance
Start-up culture with an office in downtown Salt Lake City, UT
Competitive medical and dental benefits for employee and family members
Other company-provided benefits such as short-term disability, basic life insurance, children’s orthodontia, and additional voluntary benefits
Flexible Paid Time Off policy
Professional Development opportunities specific to role

Preferred qualifications

Experience with firewall and network security platforms such as Palo Alto Networks, Cisco ASA/Cisco Secure Firewall, Fortinet FortiGate, Check Point, Juniper SRX, SonicWall, Cisco Meraki, Sophos, WatchGuard, Microsoft Azure network security technologies, or Amazon Web Services network security technologies
Experience with Zscaler technologies (including ZIA, ZPA, Client Connector, ZDX, Cloud Firewall, DLP, and Zscaler traffic forwarding and automation)
Experience with Netskope technologies including Netskope One SASE/SSE, CASB, SWG, Private Access, Cloud Firewall, SD-WAN, or SkopeAI
Understanding or experience with cloud networking and security technologies within Microsoft Azure, AWS, and GCP
Experience with cloud networking concepts such as virtual networks/VPCs, subnets, route tables, security groups, cloud firewalls, VPN gateways, private connectivity, cloud routing, and hybrid network connectivity
Familiarity with wireless network security, SNMP monitoring and alerting solutions, network monitoring and performance-management platforms, and network automation
Familiarity with packet capture and network troubleshooting tools
Familiarity with REST APIs, PowerShell, and/or Python, including infrastructure scripting or automation
Relevant networking, security, firewall, cloud, Netskope, or Zscaler certifications are a plus (active and actively maintained certifications are preferred), including examples like Zscaler ZDTA/ZDTE; Netskope NCCSI/NCCSA or Netskope SASE accreditation; Cisco CCNA/CCNP; Palo Alto Networks CSA/CSP; CompTIA Network+/Security+; and other relevant certifications

This position supports a mix of operational and project-based activities across multiple customers and environments. Hybrid work is mostly remote, with potential time in office (downtown Salt Lake City) for troubleshooting, updating, and replacing network equipment, and client visits as required. Some time on-call is required and is rotational, described as not extensive.

View full job page →

1mo ago

Cybersecurity Network Engineer

Seminole Hard Rock Support Services Davie, FL

Davie, FL

1mo ago Closed

Full time Application Security Azure Azure Networking

This position is no longer accepting applications (closed Sep 4, 2026).

Job Description

Seminole Hard Rock Support Services is seeking a hands-on Cybersecurity Network Engineer to build, operate, and continuously enhance enterprise network security controls across on-premises and cloud environments. In this role, you will turn network architecture and security policy into measurable, automated defenses, with Microsoft Azure as the primary cloud and additional coverage spanning AWS and Google Cloud. The work focuses on deploying and tuning secure access, edge, and segmentation controls while instrumenting telemetry for detection, triage, and response.

What you will do

Deploy, configure, and tune secure-access service edge controls including secure web gateway, cloud firewall, CASB, and DLP policies, maintaining coverage and current policy alignment.
Operate zero-trust network access for workforce and third parties, moving away from legacy VPN patterns toward identity-aware, least-privilege application access.
Operate an enterprise browser to enforce least-privilege isolated access to sensitive applications from both managed and unmanaged endpoints.
Tune SSL/TLS inspection, tenant restrictions, and egress policy to balance security, privacy, and application compatibility, including traffic sensitive to interception such as NTLM, Kerberos, and certificate-pinned traffic.
Manage traffic steering, forwarding, and PAC configurations so users route through the correct control path from any worldwide location.
Administer edge and perimeter defenses such as WAF rules, DDoS mitigation, bot management, and CDN and DNS policies for internet-facing properties.
Operate API security posture and runtime protection by discovering shadow APIs and closing authentication and data-exposure gaps.
Administer next-generation firewall policy, NAT, and rule lifecycle across data center and property perimeters, supporting rule hygiene and least-privilege access.
Harden DNS, certificate, and TLS posture at the edge in partnership with PKI and infrastructure teams.
Coordinate perimeter changes with franchise, property, and vendor networks so remote sites integrate securely without breaking authentication or application flows.
Deploy and tune network detection and response, triaging anomalous east-west and north-south activity and delivering high-fidelity findings to the SOC.
Engineer network telemetry pipelines (flow data, DNS logs, proxy logs, firewall logs, packet metadata) to route, shape, and enrich data for cost-effective analysis.
Develop and tune network-focused detections and SIEM content, mapping coverage to attacker techniques.
Investigate network-layer incidents end-to-end by correlating packet capture, flow, proxy, and firewall logs to isolate root cause under time pressure.
Maintain authoritative visibility of network assets and attack surface by continuously reconciling what is connected against what is inventoried.
Apply zero-trust segmentation and least-privilege access across campus, data center, gaming, and hospitality network estates.
Design and enforce microsegmentation and network policy for sensitive zones including payment, gaming, surveillance, and OT/IoT environments, in partnership with infrastructure and compliance teams.
Implement cloud network security guardrails across Azure (primary), AWS, and Google Cloud, including virtual network design, firewalling, private connectivity, and logging baselines such as Azure Firewall, NSGs, and Private Link.
Remediate cloud network misconfigurations and exposure paths identified by posture management to prevent long-term drift.
Integrate network security checks into infrastructure-as-code and deployment workflows so network changes are secure by default.
Build and maintain network security automations, integrations, and response playbooks across the stack using APIs and SOAR.
Leverage AI/ML and large language models to analyze network telemetry at scale, accelerate alert triage and enrichment, surface anomalies, and automate reporting and documentation.
Develop production-grade scripts, services, and tooling (including Python, PowerShell, and Go) to operationalize network controls and reduce repetitive manual work.
Automate firewall rule reviews, policy validation, and configuration compliance checks so drift is caught by pipelines rather than manual review.
Instrument metrics and dashboards that measure network control coverage, detection efficacy, and remediation timeliness.
Partner with Cybersecurity Architecture, IAM, infrastructure, application, and SOC/MSSP teams to deploy network controls consistently and resolve issues quickly.
Support Cybersecurity Strategy & Governance, audit, and privacy programs by automating evidence collection and continuous control monitoring for network controls.
Document standards, runbooks, integration designs, and operating procedures to keep network controls repeatable and supportable.
Research, prototype, and pilot emerging network security tools and AI-driven capabilities that improve detection, automation, and analyst efficiency.
Participate in an on-call rotation and incident response for a 24/7 gaming and hospitality environment.

Experience and skills

5–7+ years of combined experience in network engineering, network security engineering, or cloud networking, with at least 4+ years hands-on focused on enterprise network security engineering.
Strong enterprise network engineering fundamentals, including hands-on design, operation, and troubleshooting of routing and switching, firewalls, proxies, VPN/ZTNA, load balancing, DNS, and TLS/PKI.
Practical automation capability with hands-on experience in Python, PowerShell, Go or similar languages, including building custom network security tooling and integrations.
Experience applying AI/ML or large language models to network data analysis, detection, triage, or automation.
Working knowledge of SASE/SSE platforms including SWG, ZTNA, CASB, and DLP, plus WAF and DDoS mitigation, NDR, and API security.
Hands-on cloud network security experience on Microsoft Azure (required), plus working experience in AWS and/or Google Cloud involving virtual network design, cloud firewalls, private connectivity, and network security posture management.
Deep networking knowledge including TCP/IP, BGP/OSPF, DNS, DHCP, TLS/PKI, NAT, IPv6, packet analysis, segmentation, and zero-trust access models.
Experience integrating network security tools and data sources via API, familiarity with SOAR playbook development, and SIEM content engineering.
Familiarity with relevant gaming and hospitality compliance frameworks such as PCI-DSS, SOX, tribal gaming regulations, and GLBA is preferred but not required.
Certifications preferred: Cisco CCNP Security, vendor certifications in next-generation firewalls and SASE/SSE platforms, Microsoft AZ-700 or AZ-500, AWS Advanced Networking Specialty, and GIAC (GCIA, GDSA, GCLD) or equivalent; CISSP is a plus.

Technologies you will work with

Cloud and networking: Microsoft Azure, AWS, Google Cloud, SASE, SWG, ZTNA, CASB, DLP, Azure Firewall, NSGs, Private Link, microsegmentation, zero-trust access, NAT, PKI, infrastructure-as-code
Security controls and telemetry: SSL/TLS inspection, NTLM, Kerberos, WAF, DDoS mitigation, bot management, CDN, DNS, API security, SIEM, SOAR, telemetry pipeline, packet metadata
Languages and automation: Python, PowerShell, Go
Compliance frameworks and certifications (as applicable): SOX, PCI-DSS, GLBA, Cisco CCNP Security, Microsoft AZ-700, Microsoft AZ-500, AWS Advanced Networking Specialty, GIAC (GCIA, GDSA, GCLD), CISSP

Benefits

Comprehensive benefits package supporting health and well-being, planning for the future, and maintaining a healthy work-life balance.
Benefits may vary with employment status.

View full job page →

Casb Cybersecurity Jobs

Network Security Engineer

Cybersecurity Network Engineer

Get Casb Cybersecurity Jobs alerts