N

Netskope

Data-centric cloud security for enterprises

Principal Engineer - Secure AI Gateway

Full-Time
$133.5k - $272k+ Bonus plan + Stock award program
Expert
Bachelor's, Master's
Santa Clara, CA, USA
In Person
Software EngineeringBackend Engineering
Company Historically Provides H1B Sponsorship

About the job

Requirements
  • The role requires 10 to 12+ years of software engineering experience, including 5+ years in an architectural or technical leadership role.
  • The candidate must have deep backend engineering expertise using Go or similar languages and be able to review code in Go and similar languages, such as C and C++.
  • The candidate must have proven experience designing large-scale, secure, cloud-native systems.
  • The candidate must have expertise building high-throughput, low-latency data systems, such as Layer 3 to Layer 7 networking, web proxies, load balancing, request routing, API gateways, security, monitoring and observability, distributed systems, and data processing.
  • The candidate must be able to address complex architectural problems across multiple products while also handling module-level design issues.
  • The candidate must understand computer architecture, including multithreading, CPU scheduling, and memory management, and have practical knowledge of Linux at the system or kernel level.
  • The candidate must have hands-on experience with Docker and Kubernetes, including debugging workloads, networking, and storage in on-premises or hybrid environments.
  • The candidate must have hands-on experience handling complex and ambiguous customer issues and persist in accomplishing objectives despite uncertainty, obstacles, and setbacks.
  • The candidate must be able to communicate effectively and position views and arguments to gain support, and negotiate skillfully in difficult situations to win concessions without damaging relationships.
  • The candidate must demonstrate confidence under pressure, mature emotional intelligence, and self-control while maintaining a positive attitude despite adversity.
  • The candidate must be willing to work with a globally distributed team across different time zones, including the United States, Taiwan, and India.
  • The candidate must be able to represent the company at appropriate external forums and industry events, promoting technical thought leadership.
  • A Bachelor of Science in Computer Science or equivalent is required.
  • Strong analytical and troubleshooting skills using debuggers such as gdb and tools such as Valgrind are required knowledge.
  • The candidate should be a proponent of test-driven development and know various unit testing frameworks.
  • The candidate must have experience with LLM APIs, Generative AI platforms, and multi-provider orchestration.
  • The candidate must have experience in deep packet inspection and real-time content analysis at line rate.
  • The candidate must have experience with threat detection, data loss prevention, and security policy enforcement.
  • The candidate must have deep knowledge of the convergence of Generative AI and cybersecurity, including prompt injection, jailbreak mitigation, and LLM-specific threat patterns.
  • The candidate must have experience implementing key management and credential-handling algorithms.
  • The candidate must have experience integrating security features such as data loss prevention, threat protection, and user and entity behavior analytics.
  • The candidate must know emerging Generative AI and cloud service security challenges and best practices.
Responsibilities
  • Design, architect, and develop high-performance, scalable cloud-based security systems to detect and mitigate threats on LLM APIs and Generative AI applications.
  • Set and drive the overall architectural design and strategic technical direction for the Cloud API Gateway platform.
  • Define and drive best practices for scalable microservices, distributed systems, APIs, and secure data flows across multiple LLM providers from Layer 3 to Layer 7.
  • Lead and inspire an engineering organization, fostering innovation, collaboration, and continuous improvement.
  • Partner with product management to understand customer requirements, lead the team, and collaborate with other engineering teams to design and implement high-quality solutions.
  • Build scalable, performant services that route, transform, and secure API protocols, including LLM APIs, REST, and gRPC, using advanced data structures and algorithms in Go; inspect LLM API traffic in real time to detect and mitigate attacks on AI services.
  • Design and implement dynamic routing algorithms for multi-provider LLM orchestration, intelligent request transformation, load balancing, and failover logic.
  • Integrate security features including data loss prevention, threat protection, and user and entity behavior analytics for LLM-specific attack-pattern recognition, content inspection, and policy application.
  • Implement credential- and token-management algorithms for secure multi-provider orchestration.
  • Perform architectural reviews and code reviews, and mentor junior engineers.
  • Stay current with emerging Generative AI and cybersecurity technologies and proactively propose innovative solutions.
Desired Qualifications
  • Startup experience in a fast-paced environment is a plus.
  • A Master of Science in Computer Science or equivalent is strongly preferred.

About the company

Netskope provides cloud security solutions for large enterprises, helping them secure data and protect against threats in cloud environments. It offers a cloud security platform with real-time data and threat protection, secure access service edge (SASE) capabilities, and advanced threat detection and response; all delivered through a subscription model. How it works: the platform continuously monitors cloud services and data traffic, enforcing security policies directly where data lives, and providing real-time protection and threat response across the cloud, network, and apps. How it differs from competitors: it emphasizes a data-centric approach—protecting the data itself in cloud environments—along with cloud-native, real-time protection and a comprehensive SASE bundle, aimed at large organizations undergoing digital transformation. Its goal is to redefine cloud, network, and data security for enterprises by enabling secure and seamless digital transformations.

Company Size

1,001-5,000

Company Stage

IPO

Headquarters

Santa Clara, California

Founded

2012

Get referred to Netskope

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Q2 fiscal 2027 revenue reached $220.5 million, up 29% year over year.
  • ARR hit $899 million, and net retention improved to 114% on September 2, 2026.
  • Management cut 5% of staff while guiding toward roughly 2% free cash flow margin.

What critics are saying

  • September 2, 2026 net new ARR rose only 9%, signaling slowing organic momentum.
  • Free cash flow was negative $29.8 million in Q2 fiscal 2027 despite 29% revenue growth.
  • Fortinet litigation still hangs over Netskope's patent portfolio, risking distraction and weak claims.

What makes Netskope unique

  • Netskope Zero Trust Engine unifies SASE, AI security, and data security on one platform.
  • August 4, 2026 DataSec Command Center centralizes discovery-to-remediation across cloud, AI, and endpoints.
  • September 15, 2026 Skylight Agent Action Control blocks risky AI agent actions before execution.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Remote Work Options
  • Flexible Work Hours

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

1%

2 year growth

0%
Yahoo Finance
Oct 22nd, 2026
Cybersecurity stocks to watch in October 2026: CrowdStrike, Netskope and Tyler Technologies

Simply Wall St has named three cybersecurity stocks from a screener that favours stronger balance sheets. Serious flaws found in PHP this year have pushed governments and companies to take websites offline and rush out fixes. Netskope (NTSK) has a market value of $8.1 billion and about $802.6 million in revenue. Its cloud-native platform secures web, cloud, and software-as-a-service traffic. CrowdStrike Holdings (CRWD) is valued at $233.3 billion, with about $5.4 billion in revenue. Its Falcon Flex subscription model aims to speed up module adoption and deepen customer commitment. Tyler Technologies is valued at $15.4 billion. It earns about $1.8 billion from enterprise software and $621 million from platform technologies, almost all from US public sector clients. The full screen found 30 more companies.

Yahoo Finance
Oct 14th, 2026
Netskope and BT International expand partnership to bring SSE to Global Fabric network

Netskope has expanded its partnership with BT International, letting organisations connect to Netskope's Security Service Edge (SSE) services through BT's Global Fabric network-as-a-service platform. The aim is to help companies roll out and scale AI agents and cloud applications securely. Global Fabric uses points of presence around the world and direct internet exchange point peering to link into the Netskope One platform. Customers get predictable, high-performance routes that improve application responsiveness and user experience. BT International also offers a single BT-managed secure access service edge experience, which combines Netskope's SSE with Global Fabric. "Security has to be built into the network path, not bolted on as an afterthought," said Parag Thakore, chief product officer, SASE, at Netskope.

CIO South Africa
Oct 1st, 2026
Sourceworx joins 2026 IT Indaba as Gold partner.

Sourceworx joins 2026 IT Indaba as Gold partner. IT infrastructure and services company Sourceworx has signed up as a Gold partner for the 2026 IT Indaba. Sourceworx is a South African IT infrastructure and services provider with over 16 years of industry experience. The company delivers technology solutions to public and private sector clients locally and abroad. It specialises in cybersecurity, software development, managed services and network operations. Sourceworx focuses on understanding unique client needs to build customised, sustainable IT environments. These tailored solutions enhance operational efficiency while strengthening enterprise security. Don't miss the opportunity to engage with Sourceworx at the 2026 IT Indaba. Over 3,000 IT professionals and industry leaders will gather for a day of learning and networking. It is a premier event for fresh ideas and collaborative conversations. The event features power-packed sessions led by top speakers and a vibrant expo floor. This is where conversations become strategies and strategies become action. The full-day event will feature live demos, pitches, exhibitors from across the industry and insights from leading CIOs. Narissa Delport is a seasoned journalist with experience across platforms and is the CIO South Africa senior writer. She cut her teeth in 24-hour newsrooms like eNCA and EWN, covering a wide range of stories, some of which included gritty investigative work. She's also worked as the deputy digital news editor at The Citizen Online. She is currently a second language English instructor, and is pursuing studies in cybersecurity. Software development company Kohde has signed up as a Gold partner for the 2026 IT Indaba. 02 October 2026 Cloud-based solutions provider CloudSuite has signed up as a silver partner for the 2026 IT Indaba. 30 September 2026 Modern security and networking leader Netskope has signed up as a Gold partner for the 2026 IT Indaba. 30 September 2026 ITR Technology has signed up as a Silver partner for the 2026 IT Indaba. 29 September 2026 Global technology company HCLTech has signed up as a Silver partner for the 2026 IT Indaba. 17 September 2026 Africa's leading ICT training provider Torque IT has signed up as a Silver partner for the 2026 IT Indaba. 16 September 2026

Nomios
Sep 23rd, 2026
Nomios expands presence in Southern Europe with leading Portuguese cybersecurity services specialist Orbcom.

Nomios expands presence in Southern Europe with leading Portuguese cybersecurity services specialist Orbcom. Sep 23, 2026 4 min. read Paris, 23 September 2026 - Nomios, a pan-European specialist in cybersecurity services, announces the acquisition of Orbcom, a leading Portuguese provider of cybersecurity services and IT consulting solutions with about €15 million of yearly revenue and 80 FTEs. Orbcom is one of the few partners with Diamond Innovator status within the Palo Alto Networks NextWave Partner Program in Portugal and a key partner of Netskope, Infoblox and Arista. The acquisition marks another milestone in Nomios' European expansion, establishing the Group's first foothold in Portugal and further reinforcing its position as the trusted cybersecurity partner for organisations across Europe. Strengthening its security expertise with key vendor relationships Nomios supports organisations across Europe in securing their critical digital infrastructures, whether on-premise or cloud based. Nomios' approach is structured around three core service pillars. Through its Consulting Services, the group provides strategic advisory and tailored support to help organisations anticipate and manage cyber risks. Its Professional Services encompass the integration, deployment, and optimisation of security and networking solutions. Finally, Nomios' Managed Services deliver continuous supervision, management, and improvement of security through its Security Operations Centre (SOC), Network Operations Centre (NOC), and Vulnerability Operations Centre (VOC). Orbcom is a leading provider of Palo Alto Networks solutions in Portugal with product specialisations in PRISMA SASE, Cortex XDR, Cortex XSOAR, firewalls, and holds leading partner status with Netskope, Arista and Infoblox. Extending Nomios' European footprint The acquisition of Orbcom establishes the group's first presence in Portugal, creating a local beachhead and building market share in the Portuguese cyber market in a segment - network security, SASE, XDR and PAM - which is estimated to grow by double digits per year. Positive impact for clients, partners, and employees This acquisition brings a positive impact for clients, partners, and employees. It provides access to an expanded footprint in Southern Europe and strengthens Nomios' capabilities with key vendor relationships in a growing market. The team and expertise will be retained, with Orbcom by Nomios continuing to operate under the leadership of its CEO, Hélder Costa, who is joining Nomios' management team as Portugal MD reporting into Nomios CEO Sébastien Kher. At this occasion, Hélder Costa together with a few members of the management team become shareholders of Nomios Group. This new structure opens up broader professional development opportunities for employees of both groups. The acquisition completed in September 2026. Sébastien Kher, CEO and Founder of Nomios, said: "We have identified Orbcom as being the right partner for us in Portugal. Hélder Costa and the Orbcom team bring exactly the combination we were looking for in Portugal: deep technical expertise, premium vendor relationships, and a genuine entrepreneurial culture that mirrors our own. The acquisition gives Nomios its first base in Portugal and a platform to serve our clients' growing needs." Hélder Costa, CEO and Founder of Orbcom, added: "Joining Nomios is a natural next step for our teams and our clients. We share the same commitment to technical excellence and long-term client relationships, and this partnership will allow us to broaden our offering and accelerate our growth as part of a pan-European group." Jean-Christophe Cini, Partner at Keensight Capital, concluded: "We are pleased to see this new step in Nomios' European expansion. The acquisition of Orbcom adds a new geography, strong vendor relationships and a talented team to the Group, reinforcing its position as the leading pan-European cybersecurity player." About Orbcom Founded in 2002 and headquartered in Porto, with additional offices in Braga, Lisbon and Lamego, Orbcom forms a technology group specialised in secure network infrastructure and advanced cybersecurity. With more than 20 years of experience, the group employs around 80 professionals and supports more than 250 clients across sectors including retail, automotive, energy, healthcare and education. Orbcom holds Diamond Innovator Partner status - the highest partner certification - within the Palo Alto Networks NextWave Partner Program and is recognised as a Cisco Certified Partner. About Nomios Nomios is one of Europe's leading providers of cybersecurity services. With a deep-rooted commitment to understanding and addressing clients' unique needs, Nomios ensures personalised and effective strategies that drive tangible results. Leveraging a wealth of experience and expertise across various industries, Nomios delivers innovative solutions across a broad client base in a wide range of sectors. Founded in 2004 by its current Group CEO, Nomios now has more than 36 offices in ten European countries. It has continually expanded its range of services, including integration, consulting, support, Managed Services, and SOC and VOC. Nomios is renowned for its experienced, loyal and highly certified engineers, making it a leading partner for vendors such as Palo Alto Networks, Juniper Networks, Cisco, Fortinet, F5, and others. Since November 2023, Keensight Capital is the majority shareholder of Nomios. www.nomios.com About Keensight Capital Keensight Capital ("Keensight"), one of the leading European Growth Buyout firms, is committed to supporting entrepreneurs as they implement their growth strategies. With over 25 years of experience and €8bn of assets under management, Keensight Capital's team of seasoned professionals leverages their differentiated private equity experience to invest in profitably growing companies generating revenues in the range of €10 million to €400 million. Drawing on its expertise in the Technology and Healthcare sectors, Keensight identifies the best investment opportunities in Europe and works closely with the management teams providing capital, strategic guidance and operational support. Keensight operates in more than 90 countries across the globe with a presence in Paris, London, Boston, and Singapore. www.keensight.com Press contacts: Nomios Tim Fleur - [email protected] +31 (0)6 4346 4012 Orbcom Marina Ramalho - [email protected] Keensight Capital Servane Taslé, Communications Director - [email protected] +33 (0)7 56 25 49 51 Headland Consultancy for Keensight Capital Will Thomas - [email protected] +44 (0)77 7669 2746 Get in touch Its SIEM experts are here to help you. Just leave your contact information, and Nomios Group will get back to you shortly.

VMblog
Sep 15th, 2026
Netskope enables security teams to stop risky AI agent actions before they execute.

Netskope enables security teams to stop risky AI agent actions before they execute. Netskope announced Netskope Skylight Agent Action Control, a new capability that classifies every action an AI agent attempts, and applies granular controls to stop high-risk actions before they execute. The capability meets security teams' need for a policy-based way to govern, rather than react to, what autonomous agents are permitted to do. Agent Action Control arrives as Netskope renames its AI security portfolio to better communicate the company's broad capabilities across AI security. Formerly Netskope One AI Security, Netskope Skylight is the new family name for the suite of Netskope AI security products including Netskope Skylight AI Command Center, Netskope Skylight AI Guardrails, Netskope Skylight AI Gateway, Netskope Skylight Agentic Broker, and Netskope Skylight AI Red Teaming. Netskope Skylight Agent Action Control Today, 91% of organizations cannot stop a risky agent action before it executes, and 54% reported a confirmed or suspected AI agent security incident in the past year. With Netskope Skylight Agent Action Control, teams can more effectively govern what an agent is attempting to do thanks to: * Control over nine different types of action: To enable granular policy definition, every agent action is classified into one of nine intent-based categories prior to execution. These include, access control changes, configuration changes, credential and secret manipulation, data destruction, infrastructure provisioning, potential data exfiltration, potential external communication, remote code execution, or source code change. * Risk-based policy profiles by agent type: Block, allow or alert based on low, medium, high or critical risk categories, with the option to send a default or custom notification to the end-user for user coaching when the action is blocked. Profiles attach to specific agents, so a coding assistant and a chat application do not have to operate under the same rules. * Granular policy alerts: Every action is logged, with security teams able to filter policy alerts by cost exposure, source code changes, infrastructure updates, or external communication to align investigation effort with organization risk prioritization. * No new console and no new agent: Netskope Skylight Agent Action Control runs on network traffic the Netskope platform already inspects, so security teams gain enforcement over agent behavior without deploying a separate tool or standing up a second console. The result is a policy that governs what an agent is allowed to do before it acts. When a coding agent working from a vague prompt attempts to delete a production repository, for example, the action is classified as data destruction at a critical risk level, and the call is stopped before it reaches the repository. The security team gets a record of the attempt instead of an incident report. This approach provides governance and controls over agents at risk of "authority drift", or whose harness or instructions are too vague or permissive. "AI agents tend to act first and explain later, and most security teams only learn what happened after it is done," said John Martin, Chief Product Officer, Netskope. "Agent Action Control puts a decision in front of every action an agent takes, so a team can say yes to agentic AI without saying yes to the one action that could cost them a production system." "As enterprises accelerate adoption of AI agents, we're finding that probabilistic controls are sometimes insufficient to protect the enterprise, but even occasional failure is unacceptable," said Dr. Grace Trinidad, Research Director for AI Security and Trust at IDC. "These hardened, policy-based, deterministic controls are the backstop that prevents AI agents from causing an enterprise incident." Netskope Skylight Agent Action Control will be available at the end of the current quarter. David Marshall is the founder of VMblog.com, one of the industry's longest-running independent publications covering modern data center technologies. What began as a focus on virtualization and cloud computing has expanded to cover the full spectrum of enterprise IT, including AI, security, and DevOps, making VMblog a trusted destination for vendor news, technology analysis, and industry commentary.Beyond publishing, David has spent his career at the intersection of technology and business, inventing, marketing, and launching a number of successful software companies and products, and building a reputation as a skilled marketing executive in the enterprise IT space.David is also a published author, having written two well-regarded books on virtualization and served as technical editor for two "For Dummies" titles covering virtualization and cloud computing. He co-founded CloudCow.com, a publication focused on cloud computing, and has been named a VMware vExpert every year since 2009, one of the longest continuous honoree streaks in the program's history.Connect with David on LinkedIn: https://www.linkedin.com/in/davidmarshall/