Senior DLP Engineer- Data Protection Solution Owner

O projekcie:
For Digital Hub Warsaw, we are looking for:

Senior DLP Engineer- Data Protection Solution Owner

(Title stated in the contract: Sr Cyber Security Engineer)

The Cyber Data Defense (CDD) Squad is seeking a Senior DLP Engineer to design, build, and operationalize enterprise data protection controls across our Microsoft Purview and Netskope platforms. This is an advanced individual-contributor role that owns complex technical execution end-to-end and may be asked to operate as a Solution Owner- holding accountability for a specific DLP tool stack (e.g., Purview email DLP or Netskope endpoint/inline DLP), its backlog, and its operational stability.

The ideal candidate bridges security engineering, platform operations, and vendor management, and can lead a workstream or technical domain without requiring day-to-day direction. This role supports Bayer's migration from Forcepoint to Purview and Netskope and the maturation of the DLP program across a highly regulated, multinational environment.

Expectations include:

- Ownership of complex execution- owns non-trivial deliverables, workstreams, or a technical/functional domain; accountable for quality, completeness, and effectiveness of outcomes.- Advanced problem solving- resolves complex, cross-cutting problems; interprets standards and frameworks and applies them to real-world scenarios, balancing technical, risk, compliance, and operational considerations.- Leadership through expertise- acts as a go-to expert, guides and reviews the work of others, and is capable of leading implementations or investigations end-to-end.- Cross-team influence- works effectively across teams and functions, influencing through expertise and collaboration rather than authority.- Continuous improvement- improves process, tooling, and quality; contributes to standards and practices but does not own them at enterprise scale.

At Bayer, we are committed to transparency, equal pay for equal work or work of equal value, and objective reward practices in line with EU and local regulations. The minimum monthly gross compensation for this role is 20 240 PLN, with final pay determined based on objective factors such as experience, qualifications, scope of responsibility, and internal alignment.

This position is eligible for variable pay components, such as performance based bonuses, awarded in accordance with the applicable employee group, role scope, and compensation structure.

Wymagania:
Qualifications & Competencies (education, skills, experience):

- Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.- Several years of hands-on experience in DLP, data protection, or cybersecurity engineering.- Demonstrated ownership of complex technical deliverables or a technical domain with minimal supervision.- Strong scripting/automation skills (e.g., Python, PowerShell) and experience with APIs and system integrations.- Working knowledge of data classification concepts, structured/unstructured data, and enterprise data flows.- Understanding of data protection regulations and compliance frameworks (e.g., GDPR, HIPAA).- Strong communication skills with both technical and non-technical stakeholders.

Preferred Qualifications

- Experience working with tools such as Microsoft Purview, Netskope, Forcepoint, or Orca.- Experience owning a security tool/solution, including backlog management, vendor coordination, and incident representation.- Familiarity with policy-as-code frameworks and Git-based CI/CD workflows for security controls.- Experience with DSPM, insider risk, and SIEM/SOAR integrations (Sentinel, Defender, Exabeam).- Experience operating in cross-functional, global, and highly regulated environments.

Codzienne zadania:
- Design, build, tune, and maintain DLP policies, profiles, SITs, and detection logic across Microsoft Purview and Netskope (endpoint, network/inline, web, and email channels).
- Test and validate policies across pre-prod and production environments prior to rollout, ensuring no new coverage gaps are introduced.
- Automate policy deployment, rule tuning, exception handling, and alert enrichment; integrate DLP telemetry with SIEM/SOAR (e.g., Sentinel/Defender).
- Solution Ownership (as assigned)
- Research and implement DLP solutions that align with the Service Owner-defined strategy and guidance.
- Adapt service-level test and deployment plans to the solution and document compliance.
- Own the solution backlog, ensuring alignment with quarterly goals.
- Manage the ServiceNow support queue and Service Desk relationship and represent DLP Operations during incidents (escalating major incidents to the Service Owner).
- Manage vendor account and technical relationships for standard business, support issues, and license/contract renewals.
- Validate consistency and governance for SITs and policies across tools.
- Provide onboarding support to Policy Engineers where necessary.
- Partner with the Networking/SASE team, Data Protection Squad, Data Privacy, and Works Council stakeholders to enable compliant, well-scoped enforcement.
- Develop metrics and dashboards for policy effectiveness, false positive/negative rates, and coverage; drive tuning feedback loops.
- Create and maintain clear technical and change documentation and act as a translation layer between business requirements and technical enforcement.