Principal Engineer, DSPM

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security.

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Paris, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork.

From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at Netskope Careers.

DSPM is designed to provide comprehensive data visibility and contextual security for the modern AI-driven enterprise. Our platform automatically discovers, classifies, and secures sensitive data across diverse environments including AWS, Azure, Google Cloud, Oracle Cloud, on‑premise infrastructure, as well as SaaS applications like Microsoft Sharepoint and Salesforce. DSPM is critical in empowering CISOs and security teams to enforce data security practices, reduce compliance risk, and maintain continuous data protection at scale.

We are a distributed team of passionate engineers dedicated to continuous learning and building impactful products. Our core product is built from the ground up in Scala, Kafka, Star Rocks, leveraging the Lightbend stack (Play/Akka).

As a key member of the DSPM team, you will contribute to developing innovative and scalable systems designed to protect the exponentially increasing volume of enterprise data. Our platform continuously maps sensitive data across all major cloud providers, and on‑prem environments, automatically detecting and classifying sensitive and regulated data types such as PII, PHI, financial, and healthcare information. It flags data at risk of exposure, exfiltration, or misuse and helps prioritize and remediate issues based on sensitivity, exposure, and business impact.

• Own and drive the strategic evolution of the DSPM platform to detect sensitive and high‑risk data at scale across complex enterprise ecosystems.
• Lead AI/ML strategy and execution, leveraging public and private LLMs to deliver advanced analytics and intelligent risk insights.
• Architect and evolve multi‑cloud, on‑prem, and emerging technology support, designing systems that span multiple teams and services.
• Drive high‑impact, cross‑team and org‑level initiatives, identifying systemic gaps and defining durable, long‑term solutions.
• Provide technical leadership across the full lifecycle— from research and architecture to delivery and operational excellence.
• Partner with Product and executive stakeholders to shape clear, scalable technical direction and execution plans.
• Ensure platform reliability and customer trust through architectural rigor and resolution of complex production challenges.
• Elevate engineering standards, processes, and trade‑offs across scalability, cost efficiency, and agility.

• 15+ years of experience building enterprise‑grade software systems.
• Proven track record designing and developing distributed, scalable, high‑performance cloud services, preferably on AWS.
• Expert‑level programming skills in Scala or Java.
• Deep understanding of database systems and data warehousing concepts, including OLTP and OLAP architectures.
• Hands‑on experience with containerization and orchestration technologies such as Docker and Kubernetes.
• Demonstrated ability to operate effectively in fast‑paced environments, managing multiple priorities and responsibilities.
• Experience leveraging cloud‑based AI services (e.g., AWS Bedrock, Sage Maker), vector databases, and Retrieval Augmented Generation (RAG) architectures is a…