Data Security Engineer

Data Security Engineer

We are seeking an experienced Enterprise Data & Platform Security Engineer to lead the design, implementation, and continuous improvement of enterprise data protection and platform security capabilities. This is an engineering-focused role responsible for strengthening data security, improving governance, reducing organizational risk, and building scalable security solutions across cloud, infrastructure, identity, and enterprise platforms.

The ideal candidate has a proactive engineering mindset and thrives on building security programs, automating processes, improving security posture, and driving long-term security strategy. This is not a monitoring or SOC analyst role.

Key Responsibilities

• Design and implement enterprise-scale data protection strategies across on-premises, cloud, SaaS, and hybrid environments.
• Develop security architectures supporting data classification, encryption, data loss prevention (DLP), tokenization, retention, and information protection.
• Lead implementation and optimization of Microsoft Purview capabilities, including data discovery, classification, labeling, governance, and DLP.
• Improve enterprise visibility into sensitive data and develop remediation strategies to reduce organizational risk.
• Design secure architecture patterns for: cloud platforms, Kubernetes and containerized environments, APIs, identity platforms, infrastructure-as-code (IaC), CI/CD pipelines.
• Lead complex investigations involving data exposure, insider risk, and security control failures while driving long-term remediation efforts.
• Perform security assessments, threat analysis, architecture reviews, and vulnerability investigations across enterprise platforms.
• Develop security standards, governance frameworks, technical baselines, and operational playbooks.
• Create dashboards, metrics, and reporting to measure security posture, policy effectiveness, and risk reduction.
• Partner with engineering, infrastructure, identity, application, privacy, and business teams to improve enterprise security maturity.
• Mentor junior security engineers and provide technical leadership across multiple initiatives.
• Drive automation, continuous improvement, and modernization of enterprise security capabilities.

Required Qualifications

• 7+ years of Information Security, Security Engineering, Cloud Security, or Platform Security experience.
• Strong experience designing and implementing enterprise data protection strategies.
• Hands-on experience with Microsoft Purview, including: data discovery, data classification, data labeling, data loss prevention (DLP), information protection, data governance.
• Experience securing cloud, hybrid, and enterprise infrastructure environments.
• Strong understanding of: Identity and Access Management (IAM), least privilege, zero trust principles, encryption, data governance.
• Experience securing Kubernetes, containers, APIs, cloud services, and CI/CD pipelines.
• Experience with SIEM, endpoint security, DLP, and enterprise security monitoring platforms.
• Strong understanding of security architecture, cloud security, networking, operating systems, and common enterprise threat vectors.
• Experience investigating security incidents involving sensitive data and coordinating remediation efforts.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to prioritize multiple initiatives while working independently in a fast-paced environment.