Senior Data Security Engineer - (Hybrid)
Core
Lead the evolution of enterprise data protection from tool administration to an engineering-driven security capability, building scalable, automated solutions across cloud, SaaS, endpoint, and email environments.
Role type
Senior IC Data Security Engineer (Policy-as-Code & DevSecOps)
Builds
Automated data protection policies, CI/CD pipelines for policy lifecycle, reusable detection logic, and guardrails for sensitive data usage.
Domain
Insurance / Cloud Security / Data Loss Prevention (DLP)
Required skills
Policy-as-Code, Security-as-Code, DevSecOps, Data Loss Prevention (DLP), data classification, Infrastructure-as-Code, API integration, cloud security architecture, Microsoft 365 security ecosystem, scripting (PowerShell, Python), Terraform, Bicep, YAML, JSON
Preferred skills
Regulatory and privacy compliance implementation, platform engineering practices, large-scale security initiative leadership
Technologies
Microsoft Purview, Microsoft Information Protection, Defender for Cloud Apps, Microsoft 365, SIEM, SOAR, REST APIs, Terraform, Bicep, PowerShell, Python
Responsibilities
Engineer enterprise DLP controls across endpoint, email, SaaS, and cloud; modernize policy deployment to version-controlled, automated workflows; build CI/CD pipelines for policy lifecycle management; develop reusable policy templates and detection logic; automate operational tasks like drift detection and health checks; integrate DLP, CASB, and identity platforms; tune detection logic to reduce false positives; design guardrails for sensitive data usage; partner with engineering and compliance teams; investigate data protection events and convert lessons into automated patterns; define metrics and dashboards for risk reduction.
Seniority
Senior, hands-on IC
