Principal Cybersecurity - Proxy Web Filtering, Web Application Firewall, CASB Engineer ID-12218

April 21, 2025

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Consumer Technology experience team is delivering innovative and reliable technology solutions to power differentiated, simplified customer experiences. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

Other Jobs You May Be Interested In

This is a hands-on operational job. Looking for an experienced candidate with extensive operational experience creating policy, tuning and supporting clients utilizing the following technologies: Akamai, Barracuda, F5, Forcepoint

Rich experience operating and maintaining premise and cloud-based proxy solutions including CASB, SWG, ZTNA and Web Application Firewalls is critical.

Must have experience performing hands-on proxy deployment, configuration, policy and maintenance. Integration experience of platforms with other security solutions and data sources required.

Key Roles and Responsibilities:

Operates and maintains Secure Web Gateways (Proxy), Web Application Firewalls, Secure Service Edge including CASB integrations with SaaS application environments
Creates and implements best practices for policies/rules/signatures to mitigate threats and address data leakage
Integrate Applications/platforms with Identity Providers leveraging current IAM technologies for SSO support
Develops advanced alerts/reports to meet requirements of key stakeholders and business units
Develops automation for security tools management and workflow integration
Collaborates with key stakeholders within Information Security and Engineering teams to develop specific use cases to address specific business requirements
Creation and implementation of custom alerting dashboards in SIEM for regular monitoring and investigations as needed
Works extensively with Business Units/stakeholders across organization to setup and tune CASB policies to secure SaaS applications
Aids in gathering, presenting metrics for measuring key performance and key risk indicators
Provides ongoing support to existing monitoring capabilities and data collection systems
Leads troubleshooting efforts in complex issues involving multiple platforms and network flows
Coordinating with vendors and other technical teams on troubleshooting and escalations
Technical Leadership: Proven track record of executing scaled security controls engineering and operations work responsibilities
Operate within a follow the sun model and participate in an on-call rotation to ensure continuous 24/7 support.
Track and analyze performance metrics and KPIs, identifying areas for improvement and implementing solutions to enhance efficiency, security efficacy, and ROI
Prepare and present regular reports to senior management, highlighting the program's progress, challenges, and achievements.

Qualifications

Manage and optimize security operations, including monitoring, detection, and response to security incidents. Ensure the continuous improvement of security processes and technologies.
7+ years of experience in Cybersecurity engineering with experience configuring, operating, and managing on-premises and cloud-based Proxy, Web Application Firewall, SSE Secure Web Gateways and CASB.
Extensive experience providing SME level support in large, highly dynamic enterprise environment.
Engineering, administrative experience of Akamai, Barracuda, F5, Forcepoint, Linux, Windows systems
SME level experience with Secure Service Edge architectures supporting Proxy, Web Application Firewall, and SSE-CASB/SWG/ZTNA
SME level experience with IdP, SSO, SAML, AD, Microsoft Entra
Solid understanding and practical experience with web applications, web platforms, web application security, application firewalls, frameworks and protocols with respect to application development, deployment, and operation
Strong understanding of TCP/IP, web protocols, networking, DNS and security concepts
Expertise with mainstream operating systems, web services, programming languages, network devices and attack vectors
Advanced expertise reviewing and analyzing log files, data correlation and packet captures
Script writing and programming using common shell and mainstream languages
Senior level understanding of PKI Technology
Working knowledge of open source and commercial application security tools and frameworks

Educational, Certifications and Other:

Excellent communication skills including metrics/performance documentation/presentation, technical drawing/architecture origination and modification
Operates well under pressure and urgent circumstances
Self-reliant and diligent in follow-through for assigned tasks
Ability to work with a geographically disperse team
Engaged collaborator, contributor and team player
CISSP, CISM, SANS GIAC, GWEB or relevant cybersecurity or technical certification
Bachelor’s degree or equivalent experience in engineering, computer science, information security/systems

Experience:

Typically requires 8-10 years' experience. Technical Career Pathway (TCP) role.

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...