Mss - CASB

We are seeking a skilled CASB L2 Engineer with strong expertise and hands-on experience with CASB platforms (Skyhigh Preferred). The role involves day-to-day administration, troubleshooting, policy management, integrations, incident handling, and supporting CASB deployments in enterprise environments. The candidate will act as the escalation point for L1 teams and collaborate with cross-functional team for smooth operations.

Key Responsibilities:Administration & OperationsManage and operate CASB operations.Monitor dashboards, alerts, and incidents related to CASB security events.Ensure availability, performance, and health of CASB services.Work aroun Policy management and configuration.Integration & DeploymentSupport integration of CASB with IdPs (Okta, Azure AD, Ping, etc.), proxies, firewalls, and SIEMs.Assist in onboarding new SaaS apps into CASB for visibility and control.Work with endpoint agents, reverse proxy, and API-based deployments.Incident Response & TroubleshootingInvestigate CASB-related security alerts (DLP violations, anomalous activity, shadow IT usage).Troubleshoot user access and application connectivity issues related to CASB policies.Collaborate with SOC teams on incident triage and escalation. Provide RCA when needed.Compliance & ReportingGenerate CASB reports for data usage, compliance adherence (GDPR, HIPAA, PCI, etc.), and management reviews.Assist in regulatory compliance through continuous policy enforcement.

Required Skills & Experience:3–6 years of experience in Information Security with 2+ years in CASB (Skyhigh preferred).Strong hands-on experience in Skyhigh CASB:Policy creation & tuning (DLP, access control, threat protection).API-based and proxy-based deployment models.Integration with IdP, SIEM, and endpoint security.Exposure to other CASB solutions like Netskope, Microsoft Defender for Cloud Apps, Zscaler CASB, Palo Alto SaaS Security is a plus.Understanding of cloud platforms (AWS, Azure, GCP) security models.Knowledge of SAML, OAuth, API security, TLS, proxies, and identity federation.Familiarity with compliance frameworks (ISO 27001, GDPR, HIPAA, PCI-DSS).Strong troubleshooting skills in CASB connectivity, policy enforcement, and DLP cases.Excellent communication, documentation, and stakeholder management skills.