Senior Data Security Engineer

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Take charge of the administration and optimization of Microsoft Purview, which includes sensitivity labels, data classification, retention policies, auditing, eDiscovery, and information protection across Microsoft 365 and Azure.

• Design, implement, and continuously enhance DLP policies across Microsoft 365, endpoints, and cloud environments.

• Investigate violations of DLP policies, manage incidents, and create custom sensitive information classifiers.

• Uphold enterprise data classification standards and information protection policies in accordance with GDPR, CCPA, and ISO 27001.

• Monitor the effectiveness of data protection measures and provide governance reporting.

• Integrate Purview with Microsoft Sentinel and develop monitoring and analytics capabilities.

• Assist in insider risk investigations and manage data-related security incidents.

• Offer secondary operational support for Microsoft Defender for Endpoint and Office 365, vulnerability management, and CSPM across Azure and AWS.

• Conduct alert investigations, policy tuning, vulnerability remediation, and security posture reporting.

• Achieve first-year goals including Purview label coverage, auto-labeling, DLP deployment, policy ownership and training, vulnerability/posture management backfill, endpoint/email security backfill, SLA adherence, and security metrics dashboards for governance committees.

⛳️ Requirements

• Over 6 years of experience in Information Security.

• 3 to 5 years of specialized experience in data protection, information protection, or data governance focused on Microsoft Purview and DLP.

• Extensive hands-on expertise with Microsoft Purview, covering Information Protection, DLP, Data Lifecycle Management, Audit, eDiscovery, and the Compliance portal.

• Strong understanding of GDPR, CCPA, ISO 27001 Annex A, NIST SP 800-53, and CIS Controls.

• Proficient in PowerShell and Microsoft Graph API for Purview/M365 administration and automation.

• Preferred familiarity with endpoint and email security tools; experience in alert triage or policy administration is an advantage.

• Familiarity with vulnerability management and/or CSPM tools; practical hands-on experience is highly preferred.

• Preferred certifications include SC-400, AZ-500, SC-200, SC-300, CISM, CISSP, or equivalent qualifications.

• Experience in integrating Purview signals with Microsoft Sentinel, including KQL development and analytics rules.

• Background in SaaS provider or cloud-first enterprise environments.

• A technical degree in Computer Science, Information Security, or a related field is preferred.

• Experience operating Microsoft Defender for Endpoint and/or Microsoft Defender for Office 365 in a SOC, IT security, or security engineering role.

• Ability to work remotely from Portugal.

🏝️ Benefits

• Competitive compensation package, including a base salary and performance-based variable pay.

• Equity/Stock options in Intapp.

• Opportunities to travel to other development centers for product training and cross-site collaboration.

• One-time home office stipend.

• Generous paid parental leave (including adoption leave), marriage leave, bereavement leave, caregiver's leave, and paid sick days.

• Meal allowance.

• Reimbursement for training related to continuing education.

• Remote work arrangement available in Portugal.