Lead Cybersecurity - Proxy Web Filtering

Overview

Job Description: This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future—you’ll create it.

• This is an action oriented, operational role. We are seeking a candidate with extensive operational experience in creating and optimizing policy, troubleshooting complex enterprise technology issues, and supporting clients using the following technologies:
  Forcepoint Web Proxy or other industry leading forward proxy technologies such as Broadcom Edge Secure Web Gateway and Web Security Service
• Operate and maintain premise-based enterprise web proxy solution for users and applications
• Performing application onboarding to application web proxy
• Performing hands-on proxy deployment, configuration, policy and maintenance
• Integration of platforms with other security solutions and data sources
• Manages proxy lifecycle activities such as software/upgrades, hardware upgrades, and hardware replacements
• Respond to both end user issues, outages, and security incidents
• Lead and coordinate troubleshooting efforts in high pressure, outage situations with leadership scrutiny
• Provides thought leadership on operational direction for proxy, SSE and associated tooling

• Operates and maintains web proxies
• Creates and implements best practices for policies/rules/signatures to mitigate threats
• Integrate Applications/platforms with Identity Providers leveraging current IAM technologies for SSO support
• Develop advanced alerts/reports to meet the requirements of key stakeholders and business units
• Develops automation for security tools management and workflow integration
• Collaborates with key stakeholders within Information Security and Engineering teams to develop specific use cases to address specific business requirements
• Creation and implementation of custom alerting dashboards in SIEM for regular monitoring and investigations as needed
• Works extensively with Business Units/stakeholders across organizations to set up and tuneproxy policies
• Aids in gathering, presenting metrics for measuring key performance and key risk indicators
• Provides ongoing support to existing monitoring capabilities and data collection systems
• Leads troubleshooting efforts in complex issues involving multiple platforms and network flows
• Coordinating with vendors and other technical teams on troubleshooting and escalations
• Proven track record of executing scaled security controls engineering and operations work responsibilities
• Operate within a follow the sun model and participate in an on-call rotation to ensure 24/7 response to issues and incidents.
• Track and analyze performance metrics and KPIs, identifying areas for improvement and implementing solutions to enhance efficiency, security efficacy, and ROI
• Prepare and present regular reports to senior management, highlighting the program's progress, challenges, and achievements.
• Manage and optimize security operations, including monitoring, detection, and response to security incidents. Ensure the continuous improvement of security processes and technologies.

• 5+ years of experience in Cybersecurity engineering with experience configuring, operating, and managing on-premises and cloud-based proxy/swg/sse.
• Extensive experience providing SME level support in large, highly dynamic enterprise environment.
• Engineering, administrative experience of Forcepoint, Linux, Windows systems
• SME level experience with proxy
• SME level experience with IdP, SSO, SAML, AD, Microsoft Entra
• Solid understanding and practical experience with web applications, web platforms, web application security, application firewalls, frameworks and…