Data Security Engineer

Data Security Engineer / Consultant Job Description

Role Overview

Data Security Professional to design, implement, and manage enterprise data protection solutions. The candidate will be responsible for safeguarding sensitive information, ensuring regulatory compliance, preventing data loss, and strengthening the organization's overall security posture across cloud and on-premises environments.

Key Responsibilities

• Design and implement data security strategies, policies, and controls to protect organizational data.
• Deploy and manage Data Loss Prevention (DLP), data classification, encryption, and rights management solutions.
• Monitor, investigate, and respond to data security incidents and breaches.
• Conduct data discovery, risk assessments, and security audits across enterprise systems.
• Implement and maintain security controls for cloud platforms, databases, applications, and endpoints.
• Ensure compliance with regulatory requirements such as GDPR, HIPAA, PCI-DSS, ISO 27001, and SOC 2.
• Collaborate with security, infrastructure, application, and business teams to mitigate data-related risks.
• Develop security standards and best practices for data handling, storage, and transmission.
• Perform vulnerability assessments and recommend remediation measures.
• Create dashboards, reports, and metrics to monitor data security effectiveness.

Required Skills

• Strong understanding of Data Security, Information Security, and Cybersecurity principles.
• Experience with Data Loss Prevention (DLP) solutions such as Microsoft Purview, Symantec DLP, Forcepoint, or Broadcom DLP.
• Knowledge of data classification, encryption, tokenization, masking, and key management.
• Experience securing cloud platforms such as Azure, AWS, or Google Cloud Platform (GCP).
• Understanding of Identity and Access Management (IAM), Privileged Access Management (PAM), and Zero Trust principles.
• Hands-on experience with SIEM tools such as Splunk, Microsoft Sentinel, QRadar, or ArcSight.
• Knowledge of compliance and governance frameworks.
• Strong analytical, troubleshooting, and incident response skills.

Preferred Qualifications

• Certifications such as CISSP, CISM, CCSP, Security+, ISO 27001 Lead Implementer, or Microsoft Security Certifications.
• Experience with Microsoft Purview Information Protection and Insider Risk Management.
• Exposure to cloud security, endpoint security, and digital forensics.
• Experience implementing enterprise security governance programs.