Data Security Engineer (Purview, DSPM, DLP)

Description

The company helps clients fit security into their technology environments, checks that changes to their IT estate are secure, and helps them get value from their investments quickly.

You will sit in the Identity and Cloud Security team, which covers identity, privileged access, cloud security and data security within the wider Cyber Security group.

The team lead has a PhD in cloud security, broad experience across cybersecurity, and a focus on identity management and data protection in cloud settings. They put real weight on learning, upskilling and personal development.

You will build, deploy and run technical controls that protect sensitive data across Microsoft 365, endpoints, cloud platforms, data stores, SaaS apps and AI environments.

You do not need to know every area on day one. The team values hands-on experience, a solid security background and a readiness to grow across data security tools.

Responsibilities

• Work directly with Microsoft Purview, Data Loss Prevention (DLP), Data Security Posture Management (DSPM) and Insider Risk Management (IRM).
• Find and classify sensitive data in cloud and on-premises systems.
• Spot data security gaps and analyse what the security findings show.
• Design and set up data protection policies and technical controls.
• Write practical, prioritised fixes and help put them in place.
• Take part across the engineering lifecycle: technical assessment, solution design, configuration, integration, testing and deployment.
• Help hand over work and keep implemented data security controls running.
• Work with security, IT and business colleagues to turn data protection needs into workable, scalable technical solutions.

Requirements

• A practical grasp of cybersecurity and data security principles.
• Hands-on work designing, implementing or running at least one of: DLP, information protection and classification, sensitive-data discovery, or DSPM.
• Working knowledge of Microsoft Purview or another enterprise data security platform.
• An understanding of how sensitive data is discovered and classified across cloud and on-premises systems.
• The ability to turn business, security and compliance requirements into data security policies and technical controls.
• The ability to analyse security findings and produce practical, prioritised fixes.
• The ability to explain technical problems, options and recommendations to both technical and non-technical people.
• The ability to work independently, own assigned tasks and deliver what clients need.
• Fluent English.
• Helps you stand out: hands-on work with Microsoft Purview, DLP or DSPM products such as Cyera, Varonis or BigID, or experience with AI security and its tools.
• Helps you stand out: familiarity with Microsoft Defender, Microsoft Sentinel and Microsoft Entra.
• Helps you stand out: cloud security on Microsoft Azure, AWS or Google Cloud, plus identity and access management, permissions, access governance and excessive-access risk.
• Helps you stand out: knowledge of data privacy, information governance and security or privacy frameworks, and broader work on data security strategy, policies or target operating models.
• Helps you stand out: experience running cybersecurity assessments, implementations or advisory projects, leading client workshops, presenting technical findings or coordinating projects.
• Helps you stand out: Microsoft or other security certifications such as SC-100, SC-200, SC-300 or SC-401, and or professional German.

Conditions

Based in the Czech Republic.

The company welcomes applicants from all backgrounds and treats everyone equally.

Benefits

• Career growth that fits your goals and pace, with experience you would otherwise take years to gain.
• Pay the company describes as fair with no gaps, and it is among the few Czech employers certified for Equal Pay.
• A flexible benefits scheme with 45,000 points to spend on what suits you.
• 30 days of paid time off, including 3 well-being days and 2 extra days at year end.
• 1 paid volunteering day each year.
• The option to work from one of the company's international offices from Senior Associate level.
• Training and certifications in business and digital skills, plus soft-skills courses such as presenting, coaching and communication. The company pays for professional certifications.
• A buddy, regular feedback and a coach to support your development and career path.
• Well-being support and healthy-living programmes, including Dr. Digital, Human Dynamic, workplace yoga and running events.
• An ultrabook and an iPhone with unlimited data.
• Social events and Away Days.