6 days ago

Data Security Engineer

bol

Utrecht

6 days ago

Apply

Data Security Engineer needed for an online retail tech platform in Utrecht, Netherlands. The role involves securing highly sensitive datasets across cloud-native environments, designing encryption strategies, and collaborating with data and engineering teams. Candidates should have experience with GCP, Python, and secure data architectures.

On-siteFull-timeSeniorPythonGCP

Data Security Engineer

Apply

On-siteFull-timeSeniorPython

Salary

Not specified

Work Location

Utrecht, Utrecht, Netherlands, NL

Work Model

On-site

Employment Type

Full-time

Experience Level

Mid-Senior level

Core Qualifications

Technical (Must-have)

PythonGCPEncryptionKey ManagementSecrets ManagementAccess ControlTokenizationPseudonymizationData MaskingCI/CDInfrastructure as CodePolicy as CodeETLAPIsCloud-Native Data Platforms

Soft Skills

CollaborationCuriosityPragmatismDeep DivingOwnershipOpen Communication

Key Responsibilities

•Perform deep-dive reviews of data flows, products, storage architectures, ETL pipelines, streaming systems, APIs, and cloud-native data platforms on GCP
•Design and implement data security controls based on data classification
•Engineer end-to-end encryption strategies including envelope encryption, HSM/KMS integrations, key rotation automation, and secrets management
•Define and deploy tokenization, pseudonymization, masking, and data minimization controls
•Contribute to detection engineering for data exfiltration attempts or misuse
•Work closely with data engineering, analytics, and ML platform teams to embed security
•Collaborate with cloud engineering teams on identity-aware data boundaries and access controls
•Make data-security automation a default: CI/CD checks, IaC security patterns, automated classification, policy-as-code, and self-service guardrails

Data SecurityGCPPythonEncryptionCloud-NativeRetailEngineeringInformation Technology

Key Responsibilities

•Perform deep-dive reviews of data flows, products, storage architectures, ETL pipelines, streaming systems, APIs, and cloud-native data platforms on GCP

•Design and implement data security controls based on data classification

•Engineer end-to-end encryption strategies including envelope encryption, HSM/KMS integrations, key rotation automation, and secrets management

•Define and deploy tokenization, pseudonymization, masking, and data minimization controls

•Contribute to detection engineering for data exfiltration attempts or misuse

•Work closely with data engineering, analytics, and ML platform teams to embed security

•Collaborate with cloud engineering teams on identity-aware data boundaries and access controls

•Make data-security automation a default: CI/CD checks, IaC security patterns, automated classification, policy-as-code, and self-service guardrails