Data Protection Engineer

Data Protection Engineer

Role Overview
We are looking for a highly technical and delivery-focused Data Protection Engineer to support Cybersecurity, Engineering, and Compliance teams.
This role is responsible for designing, implementing, and enhancing data protection controls to safeguard sensitive corporate and customer data across cloud, endpoint, and enterprise environments.
You will act as a subject matter expert in data security and privacy engineering, working closely with Engineering, IT, Legal, Compliance, and Privacy teams to embed privacy-by-design principles into systems and processes.
Key Responsibilities
Data Protection & Security Engineering
Implement and optimize data discovery and classification tools across enterprise and cloud environments
Design and deploy DLP (Data Loss Prevention) controls and reduce false positives
Implement encryption, tokenization, and key management controls (key rotation, access control, break-glass procedures)
Strengthen data lifecycle management, including retention and secure data disposal
Monitoring, Incident Response & Integration
Integrate data protection tools with SIEM/SOAR and incident response systems
Investigate DLP alerts, data exposure risks, and misconfigurations
Support incident response and remediation tracking
Maintain audit-ready documentation and operational runbooks
Compliance & Governance
Align technical controls with SOC 2, PCI, and privacy regulations
Collaborate with Legal, Compliance, and Privacy teams to implement enforceable controls
Support audits and ensure evidence readiness and compliance reporting
Automation & Efficiency
Automate workflows using Python, PowerShell, or APIs
Standardize DLP policies, classification models, and configurations
Build dashboards and metrics for:
Data protection coverage
Control effectiveness
False positives
Remediation timelines
Innovation & Continuous Improvement
Improve data protection strategies for cloud, SaaS, and modern workplace environments
Leverage AI and automation to enhance classification and anomaly detection
Evaluate and implement new tools and best practices
Requirements
Bachelor’s degree in Information Security, Computer Engineering, or related field
5+ years of experience in data security / privacy / security engineering
Must-Have Skills
Hands-on experience with:
Data discovery & classification tools (e.g., Microsoft Purview or similar)
DLP implementation across endpoints, email, cloud, and collaboration platforms
Experience with:
Encryption, tokenization, and key management
Compliance frameworks (SOC 2, PCI, GDPR, etc.)
Strong experience in:
Incident handling and data protection operations
Cross-functional collaboration
Good-to-Have
Automation using:
Python / PowerShell / APIs
Certifications:
CDPSE, CIPT, Security+ or similar
Success in This Role
Reduced data exposure risks
Improved DLP accuracy and reduced false positives
Strong compliance alignment and audit readiness
Scalable, automated, and efficient data protection controls