Data Security Engineer

Department: Cyber Security & Data Privacy, Digital & Technology Platform Services.

We are seeking an experienced Data Security Engineer to join our cybersecurity team and strengthen the protection of sensitive information across Microsoft 365, cloud, endpoint, and supported enterprise data environments. This role requires strong technical expertise in Microsoft Purview, data discovery and classification, sensitivity labeling, Data Loss Prevention, and AI-assisted automatic labeling.

As a Data Security Engineer, you will partner with Cybersecurity Teams, Data Governance, Privacy, Legal, Compliance, AI Governance, and business data owners to translate data protection requirements into scalable technical controls. You will provide hands-on technical leadership, improve classification accuracy, automate control deployment and reporting, and help ensure that sensitive data is used securely by users, applications, Microsoft 365 Copilot, and other approved AI services. This role will report to the Data Security Product Manager.

YOUR KEY RESPONSIBILITIES:

• Advance the enterprise data security and information protection strategy through cross-functional initiatives and measurable control improvements.
• Design, implement, and maintain Microsoft Purview sensitivity labels, label policies, protection settings, visual markings, encryption, and access controls.
• Engineer and tune automatic labeling policies using sensitive information types, Exact Data Match, document fingerprinting, keywords, metadata, and trainable classifiers.
• Use simulation-first deployment to evaluate matches, false positives, false negatives, policy conflicts, failed items, and source coverage efore enforcement.
• Develop and maintain an enterprise data classification taxonomy aligned with business value, privacy requirements, regulatory obligations, and information-handling standards.
• Create and optimize custom sensitive information types, keyword dictionaries, regular expressions, confidence levels, proximity rules, and corroborative evidence.
• Use Microsoft Purview Data Explorer, Content Explorer, Activity Explorer, and relevant reporting capabilities to identify sensitive-data locations, usage patterns, and control gaps.
• Design AI-assisted classification approaches using Microsoft Purview trainable classifiers and supported machine-learning capabilities, including representative positive and negative training samples.
• Protect data used by Microsoft 365 Copilot, enterprise AI applications, agents, and other approved generative AI services through labeling, Data Loss Prevention, access governance, and monitoring controls.
• Investigate data security alerts, labeling anomalies, and policy failures while preserving confidentiality, evidence integrity, and least-privilege access.
• Automate repeatable administration, validation, reporting, and evidence collection using PowerShell, Microsoft Graph, APIs, and infrastructure-as-code practices where supported.
• Maintain technical designs, configuration standards, runbooks, test plans, rollback procedures, exception records, and audit evidence.

ARE THESE YOUR SECRET INGREDIENTS?

• 5+ years of experience in information security, data security, protection, data governance, cloud security, or Microsoft 365 security engineering.
• 3+ years of hands-on experience with Microsoft Purview or equivalent enterprise information protection and Data Loss Prevention technologies.
• Bachelor’s degree in computer science, Information Security, Information Systems, Engineering, or a related field, or equivalent professional experience.
• At least one relevant cybersecurity or Microsoft certification, such as Microsoft Certified: Information Protection and Compliance Administrator Associate, Microsoft Certified: Cybersecurity Architect Expert, or an equivalent certification.
• Deep hands-on knowledge of Microsoft Purview Information Protection, sensitivity labels, auto-labeling policies, data classification, and Data Loss Prevention.
• Strong knowledge of Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive, Teams, Office applications, and supported endpoints.
• Experience protecting data used by Microsoft 365 Copilot, enterprise AI applications, agents, or other generative AI services.
• Knowledge of Microsoft Entra ID, role-based access control, least privilege, separation of duties, and identity and access management concepts.
• Hands-on experience with PowerShell, Microsoft Graph, REST APIs, JSON, regular expressions, and security automation.
• Ability to troubleshoot complex policy behavior across users, groups, locations, applications, repositories, and data types.
• Working knowledge of data privacy, records handling, information governance, security control frameworks, and applicable regulatory requirements.
• Ability to work cross-functionally with Cybersecurity, Data Governance, Privacy, Legal, Compliance, AI Governance, platform teams, and business data owners.

ABOUT YOUR NEW TEAM:

We are Coca-Cola Hellenic, a growth-focused consumer goods business and strategic bottling partner of the Coca-Cola Company. We bottle, distribute and sell an unrivalled range of products in 29 markets in Europe, Africa and Eurasia. As we do, we create value for all stakeholders, support socio-economic growth and build a more positive environmental impact.

We bring together more than 30,000 people from over 70 nationalities, coming from five continents. The diversity of our markets, from mature to emerging economies, provides a wide range of attractive opportunities for growth.

We nurture our talents. We give opportunities to people across all functions and levels, as well as different geographies, backgrounds and education. We are willing to take a risk on the people we believe in, even if they don’t have the perfect experience. We have faith in what every person can be.

AT COCA-COLA HBC, DIVERSITY HELPS US THRIVE

At Coca-Cola HBC, we are an inclusive employer that thrives on diversity. This means our environment provides equal opportunities for all, regardless of race, color, religion, age, disability, sexual orientation, or gender identity. Join us in nurturing a culture where everyone belongs and contributes to our collective success.