Data Security Engineer (Purview, DSPM, DLP)

Description

The company's cybersecurity centre in Central and Eastern Europe has over 200 specialists who help clients build digital resilience, set cybersecurity strategies and measure their security maturity.

The team builds and runs processes such as monitoring and incident response, and helps clients roll out specific security systems.

Their work draws on business process knowledge, current cyber threats, and experience from security audits and support for SOC teams.

Responsibilities

• Design, deploy and run technical controls that protect sensitive data in Microsoft 365, endpoints, cloud platforms, data stores, SaaS applications and AI environments.
• Hands on, use Microsoft Purview, DLP, DSPM and Insider Risk Management to find and classify sensitive data, spot exposures, set up protection policies and fix the risks found.
• Take part in the full engineering cycle: technical assessment, solution design, configuration, integration, testing, deployment and handover to operations.
• Turn data protection, security and compliance requirements into technical solutions that scale and work in practice.
• Review security findings and write practical remediation advice, ranked by priority.
• Run client workshops and present technical results.
• Work with security, IT and business teams, and explain technical issues, options and recommendations clearly.

Requirements

• Experience designing, implementing or running solutions in at least one of: DLP, information protection and classification, sensitive data discovery, or Data Security Posture Management (DSPM).
• Knowledge of Microsoft Purview or another enterprise data security platform.
• Understanding of how sensitive data is discovered and classified in both cloud and on-premises environments.
• Ability to turn business, security and compliance requirements into data security policies and technical controls.
• Ability to analyse security findings, own assigned tasks, and communicate clearly with both technical and non-technical people.
• Hands-on experience with Microsoft Purview, DLP or DSPM products such as Cyera, Varonis or BigID, plus other data security tools.
• Knowledge of AI security and experience with AI security solutions.
• Experience with cloud security on Microsoft Azure, AWS or Google Cloud.
• Understanding of identity and access management, including permissions, access governance and the risks of excessive access.
• Understanding of data privacy, information governance and relevant security or privacy frameworks.
• Relevant Microsoft or other security certifications, such as SC-100, SC-200, SC-300 or SC-401.
• Professional-level German and proficient English.

Conditions

Hybrid work with at least 2 days per week in the office.

Flexible start to the working day and the option of workation.

Equal opportunity applies to all candidates.

Benefits

• Full onboarding support, mentoring from experienced colleagues, training sessions, workshops, and conversations with native speakers.
• A medical care package including freedom of treatment, physiotherapy and dental care discounts, plus coaching, mindfulness sessions, psychological support, webinars and workshops, and financial and legal advice.
• A flexible benefits package, for example a lunch pass, insurance, concierge service, pet veterinary cover and massages, plus a cafeteria with vouchers and discounts on IT equipment and car purchases.
• Sabbatical leave.
• 3 paid volunteering hours per month.
• An extra paid day off on your birthday.
• A referral option: once settled in, you can recommend a friend to join.