Senior Data Security Engineer

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Take ownership and manage the Microsoft Purview platform, encompassing Compliance, Information Protection, Data Lifecycle, Audit, and eDiscovery.

• Set up and oversee sensitivity labels, auto-labeling, and information protection strategies.

• Administer retention policies, retention labels, and data lifecycle management controls.

• Design, execute, and enhance Data Loss Prevention (DLP) strategies across Microsoft 365, Teams, Endpoint, and Azure.

• Investigate DLP incidents, refine policies, and minimize false positives.

• Develop and uphold custom sensitive information types, trainable classifiers, and keyword dictionaries.

• Maintain enterprise-level data classification and information governance policies.

• Generate governance and compliance reports on data protection and the effectiveness of DLP measures.

• Integrate Microsoft Purview with Microsoft Sentinel, utilizing KQL queries, analytics, and dashboards.

• Assist with Insider Risk Management, investigations, and incident response for data exposure incidents.

• Provide operational support for Microsoft Defender, including Endpoint, Office 365, Vulnerability Management, and Defender for Cloud.

• Aid in cloud security posture management and remediation in accordance with security frameworks (CIS, NIST, ISO 27001).

⛳️ Requirements

• Over 6 years of experience in information security, with 3–5 years specifically focused on data protection or information governance related to Microsoft Purview and DLP.

• Extensive, hands-on experience with Microsoft Purview, covering Information Protection, DLP, Data Lifecycle Management, Audit, eDiscovery, and the Compliance portal.

• Strong understanding of GDPR, CCPA, ISO 27001 Annex A, NIST SP 800-53, and CIS Controls.

• Proficient in PowerShell and Microsoft Graph API for Purview and M365 administration and automation tasks.

• Familiarity with Microsoft Defender for Endpoint, Defender for Office 365, Defender Vulnerability Management, and Defender for Cloud.

• Relevant certifications: SC-400 or AZ-500 are highly regarded; SC-200, SC-300, CISM, or CISSP are advantageous.

• Experience in integrating Purview with Microsoft Sentinel, including KQL development and analytics rule creation.

🏝️ Benefits

• Hybrid work model that accommodates agile and flexible hours.

• Competitive compensation package, including base salary and performance-related variable pay.

• Equity and stock options in Intapp.

• Opportunities for travel to other development centers for product training and cross-site collaboration.

• One-time stipend for setting up a home office.

• Generous paid parental leave (including adoptive leave), marriage leave, bereavement leave, carer's leave, and paid sick days.

• Reimbursement for training expenses related to continuing education.