Senior DLP Engineer- Data Protection Solution Owner

The Cyber Data Defense (CDD) Squad at Bayer's Digital Hub Warsaw seeks a Senior DLP Engineer to design, build, and operate enterprise data protection controls across Microsoft Purview and Netskope platforms. The role supports the migration from Forcepoint to Purview and Netskope and the maturation of the DLP program in a highly regulated, multinational environment.

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• Several years of hands-on experience in DLP, data protection, or cybersecurity engineering.
• Ownership of complex technical deliverables or domains with minimal supervision.
• Strong scripting and automation skills in Python and PowerShell.
• Experience with APIs and system integrations.
• Knowledge of data classification concepts, structured/unstructured data, and enterprise data flows.
• Understanding of data protection regulations and compliance frameworks such as GDPR and HIPAA.
• Strong communication skills with technical and non-technical stakeholders.

Nice to have:

• Experience with Microsoft Purview, Netskope, Forcepoint, or Orca tools.
• Experience in owning security tools/solutions including backlog management and vendor coordination.
• Familiarity with policy-as-code frameworks and Git-based CI/CD workflows for security controls.
• Experience with DSPM, insider risk, SIEM/SOAR integrations (Sentinel, Defender, Exabeam).
• Experience working in cross-functional, global, highly regulated environments.

• Design, build, tune, and maintain DLP policies, profiles, SITs, and detection logic across Microsoft Purview and Netskope (endpoint, network/inline, web, and email channels).
• Test and validate policies across pre-production and production environments prior to rollout.
• Automate policy deployment, rule tuning, exception handling, and alert enrichment; integrate DLP telemetry with SIEM/SOAR (e.g., Sentinel, Defender).
• Act as Solution Owner for assigned DLP tools, owning solution backlog and ensuring alignment with quarterly goals.
• Manage ServiceNow support queue and Service Desk relationships; represent DLP Operations during incidents.
• Manage vendor account and technical relationships for business support and license/contract renewals.
• Validate consistency and governance for SITs and policies across tools.
• Provide onboarding support to Policy Engineers.
• Collaborate with Networking/SASE team, Data Protection Squad, Data Privacy, and Works Council to ensure compliant enforcement.
• Develop metrics and dashboards for policy effectiveness and tuning.
• Create and maintain clear technical and change documentation; translate business requirements into technical enforcement.