Senior DLP Engineer- Data Protection Solution Owner

The Cyber Data Defense (CDD) Squad is seeking a Senior DLP Engineer to design, build, and operationalize enterprise data protection controls across Microsoft Purview and Netskope platforms. This advanced individual-contributor role owns complex technical execution end-to-end and may operate as a Solution Owner, accountable for a specific DLP tool stack, its backlog, and operational stability.

The role supports migration from Forcepoint to Purview and Netskope and the maturation of the DLP program in a highly regulated, multinational environment.

Expectations

• Own complex deliverables, workstreams, or a technical/functional domain; accountable for quality, completeness, and effectiveness of outcomes.
• Resolve complex, cross-cutting problems and apply standards and frameworks to real-world scenarios while balancing technical, risk, compliance, and operational considerations.
• Act as a go-to expert, guide and review others’ work, and lead implementations or investigations end-to-end.
• Work effectively across teams and functions, influencing through expertise and collaboration.
• Improve processes, tooling, and quality; contribute to standards and practices.

Compensation

The minimum monthly gross compensation is 20,240 PLN. Final pay is determined based on experience, qualifications, scope of responsibility, and internal alignment. The position is eligible for variable pay components, such as performance-based bonuses, in accordance with the applicable employee group, role scope, and compensation structure.

Tasks & Responsibilities

DLP Engineering & Operations

• Design, build, tune, and maintain DLP policies, profiles, SITs, and detection logic across Microsoft Purview and Netskope for endpoint, network/inline, web, and email channels.
• Test and validate policies in pre-production and production environments before rollout, ensuring no new coverage gaps are introduced.
• Automate policy deployment, rule tuning, exception handling, and alert enrichment; integrate DLP telemetry with SIEM/SOAR tools such as Sentinel and Defender.

Solution Ownership (as assigned)

• Research and implement DLP solutions aligned with Service Owner-defined strategy and guidance.
• Adapt service-level test and deployment plans to the solution and document compliance.
• Own the solution backlog and align it with quarterly goals.
• Manage the ServiceNow support queue and Service Desk relationship; represent DLP Operations during incidents and escalate major incidents to the Service Owner.
• Manage vendor accounts and technical relationships for standard business, support issues, and license or contract renewals.
• Validate consistency and governance for SITs and policies across tools.
• Provide onboarding support to Policy Engineers when necessary.

Collaboration & Continuous Improvement

• Partner with Networking/SASE, Data Protection Squad, Data Privacy, and Works Council stakeholders to enable compliant, well-scoped enforcement.
• Develop metrics and dashboards for policy effectiveness, false-positive and false-negative rates, and coverage; drive tuning feedback loops.
• Create and maintain technical and change documentation; translate business requirements into technical enforcement.

Qualifications & Competencies

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.
• Several years of hands-on experience in DLP, data protection, or cybersecurity engineering.
• Demonstrated ownership of complex technical deliverables or a technical domain with minimal supervision.
• Strong scripting and automation skills, including Python and PowerShell, plus experience with APIs and system integrations.
• Working knowledge of data-classification concepts, structured and unstructured data, and enterprise data flows.
• Understanding of data-protection regulations and compliance frameworks, including GDPR and HIPAA.
• Strong communication skills with technical and non-technical stakeholders.

Preferred Qualifications

• Experience with Microsoft Purview, Netskope, Forcepoint, or Orca.
• Experience owning a security tool or solution, including backlog management, vendor coordination, and incident representation.
• Familiarity with policy-as-code frameworks and Git-based CI/CD workflows for security controls.
• Experience with DSPM, insider risk, and SIEM/SOAR integrations, including Sentinel, Defender, and Exabeam.
• Experience in cross-functional, global, and highly regulated environments.

Success Measures (First 6–12 Months)

• Owned solution operating stably with a healthy, prioritized backlog in ADO.
• Improved alert fidelity and policy consistency across platforms.
• Effective vendor and cross-team relationships enabling smooth support and change management.

Benefits

• Medical care above statutory requirements.
• Flexible benefits supporting leisure and well-being/sports programs.
• Life, accident, and disability insurance through group coverage.
• Employer-supported pension plans with regular company contributions.
• Home-office allowance to support hybrid or remote work.
• Extra paid holidays.

Benefits may vary depending on country, role, and employment conditions.