Data Security Engineer
Summary
The Data Security Engineer manages and implements data protection controls, specifically using Microsoft Purview, DLP, and DSPM tools. The role involves securing data across cloud and SaaS environments, automating tasks with PowerShell, and ensuring compliance with GDPR and NIST frameworks.
- Own the operational delivery and ongoing management of data security tooling, including Microsoft Purview and DSPM capabilities
- Implement and mature data classification, labelling, and data protection controls
- Translate policy and regulatory requirements into practical technical controls with Information Security, IT, Legal, and business stakeholders
- Design, implement, and operate Microsoft Purview Information Protection and Data Loss Prevention capabilities
- Roll out and tune classification and labelling across SharePoint, OneDrive, Exchange, and Teams
- Monitor and improve DLP and data protection controls across endpoints, email, and cloud services
- Support secure adoption of collaboration and AI technologies by reducing data exposure risks
- Own the technical implementation and day-to-day operation of the DSPM platform
- Maintain visibility of sensitive data across Microsoft 365, SaaS platforms, and cloud environments
- Identify, investigate, and support remediation of data exposure risks, excessive permissions, and insecure data handling
- Integrate DSPM capabilities with Defender, Sentinel, and Purview
- Embed data protection controls into Azure, AWS, SaaS, and other business systems
- Provide data security expertise to technical projects, cloud initiatives, and new technology deployments
- Provide subject matter expertise during investigations involving data loss, misuse, or exposure
- Support monitoring, tuning, and operational response for data security alerts and incidents
- Improve data security processes, workflows, and operational reporting
- Develop reporting on data security metrics and control effectiveness
- Automate operational and administrative tasks using PowerShell and native platform tooling
- Engage technical and non-technical stakeholders to improve data handling practices and adoption of security controls
Requirements
- Strong hands-on experience with Microsoft Purview, including Information Protection and DLP capabilities
- Experience implementing or supporting data classification and labelling within Microsoft 365 environments
- Experience operating or tuning DLP controls across endpoint, email, and cloud environments
- Understanding of data security challenges involving SaaS platforms, cloud services, collaboration, and AI adoption
- Familiarity with DSPM concepts or data discovery tooling; hands-on implementation experience desirable
- Ability to translate security and compliance requirements into practical technical controls
- Experience supporting investigations involving data loss, misuse, or insider risk scenarios
- Working knowledge of Microsoft Defender and Entra ID
- Experience with PowerShell or similar scripting and automation tooling
- Ability to work independently and take ownership of operational technical platforms
- Strong communication skills with technical and non-technical stakeholders
- Working knowledge of GDPR principles and risk-based security frameworks such as NIST CSF
- CV and cover letter required
- Applications close 23 August 2026
Core Competencies
Demonstrates expertise in data security tooling, particularly with Microsoft Purview and DLP capabilities, while effectively translating regulatory requirements into actionable technical controls. Proficient in implementing data classification and protection measures across various platforms, ensuring secure data handling practices.
Highest-signal resume keywords
- Microsoft Purview
- Data Loss Prevention (DLP)
- Data Classification and Labelling
- PowerShell Scripting
- GDPR Principles
ATS Optimization Keywords
Hard Skills
- Data Security
- Information Protection
- DSPM Capabilities
- Cloud Security
- Data Exposure Risk Management
- Technical Control Implementation
- Operational Reporting
- Data Security Metrics
- Automation Tooling
- SaaS Security
Soft Skills
- Strong Communication Skills
- Stakeholder Engagement
- Independent Work
- Ownership
Industry Keywords
- NIST CSF
- Risk-Based Security Frameworks
- Data Handling Practices
- Data Loss Investigations
- Insider Risk Scenarios
Tools & Technologies
- Microsoft 365
- Azure
- AWS
- Microsoft Defender
- Entra ID
- SharePoint
- OneDrive
- Exchange
- Teams
- PowerShell