Senior DLP Engineer- Data Protection Solution Owner
Summary
Senior engineer designs, builds, and runs enterprise data loss prevention controls on Microsoft Purview and Netskope while owning a specific DLP tool stack and its operational stability.
For Digital Hub Warsaw, we are looking for:
Senior DLP Engineer- Data Protection Solution Owner
(Title stated in the contract: Sr Cyber Security Engineer)
The Cyber Data Defense (CDD) Squad is seeking a Senior DLP Engineer to design, build, and operationalize enterprise data protection controls across our Microsoft Purview and Netskope platforms. This is an advanced individual-contributor role that owns complex technical execution end-to-end and may be asked to operate as a Solution Owner- holding accountability for a specific DLP tool stack (e.g., Purview email DLP or Netskope endpoint/inline DLP), its backlog, and its operational stability.
The ideal candidate bridges security engineering, platform operations, and vendor management, and can lead a workstream or technical domain without requiring day-to-day direction. This role supports Bayer's migration from Forcepoint to Purview and Netskope and the maturation of the DLP program across a highly regulated, multinational environment.
Expectations include:
- Ownership of complex execution- owns non-trivial deliverables, workstreams, or a technical/functional domain; accountable for quality, completeness, and effectiveness of outcomes.
- Advanced problem solving- resolves complex, cross-cutting problems; interprets standards and frameworks and applies them to real-world scenarios, balancing technical, risk, compliance, and operational considerations.
- Leadership through expertise- acts as a go-to expert, guides and reviews the work of others, and is capable of leading implementations or investigations end-to-end.
- Cross-team influence- works effectively across teams and functions, influencing through expertise and collaboration rather than authority.
- Continuous improvement- improves process, tooling, and quality; contributes to standards and practices but does not own them at enterprise scale.
At Bayer, we are committed to transparency, equal pay for equal work or work of equal value, and objective reward practices in line with EU and local regulations. The minimum monthly gross compensation for this role is 20 240 PLN, with final pay determined based on objective factors such as experience, qualifications, scope of responsibility, and internal alignment.
This position is eligible for variable pay components, such as performance based bonuses, awarded in accordance with the applicable employee group, role scope, and compensation structure.
Qualifications & Competencies (education, skills, experience):
- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
- Several years of hands-on experience in DLP, data protection, or cybersecurity engineering.
- Demonstrated ownership of complex technical deliverables or a technical domain with minimal supervision.
- Strong scripting/automation skills (e.g., Python, PowerShell) and experience with APIs and system integrations.
- Working knowledge of data classification concepts, structured/unstructured data, and enterprise data flows.
- Understanding of data protection regulations and compliance frameworks (e.g., GDPR, HIPAA).
- Strong communication skills with both technical and non-technical stakeholders.
Preferred Qualifications
- Experience working with tools such as Microsoft Purview, Netskope, Forcepoint, or Orca.
- Experience owning a security tool/solution, including backlog management, vendor coordination, and incident representation.
- Familiarity with policy-as-code frameworks and Git-based CI/CD workflows for security controls.
- Experience with DSPM, insider risk, and SIEM/SOAR integrations (Sentinel, Defender, Exabeam).
- Experience operating in cross-functional, global, and highly regulated environments.