Data Security Engineering Specialist (Cloud Security)

bp; Pune District; Hybrid; INR 3,500,000 - 6,000,000; Full time

Job summary

bp is seeking a senior data security professional to lead protection across multi-cloud environments. You will help secure data pipelines, implement encryption and DSPM, and work with architects to enforce secure-by-default configurations in AWS and Azure.

The role requires strong scripting skills (Python/PowerShell) and experience with Databricks, Azure Synapse, and data governance tools. Collaboration with compliance and risk teams is essential to continually improve bp's security posture.

Qualifications

• 9+ years in cybersecurity with at least 4 years in data security and handling sensitive data in hybrid/cloud environments.
• Expertise in cloud security across AWS and Azure with data-protection controls.
• Experience with modern data platforms and securing data pipelines.
• Knowledge of encryption, key management, and Zero Trust.
• Ability to read/write code/scripts (Python/PowerShell/JSON/YAML).
• Familiarity with data governance tools and AI security applications.

Responsibilities

• Improve and maintain enterprise data security standards covering data classification, encryption, retention, access governance, and monitoring, with focus on AWS/Azure.
• Collaborate with security architects and platform teams for secure-by-default configurations across cloud and SaaS platforms.
• Maintain baselines for data protection tools across structured and unstructured data, including modern data platforms.
• Monitor compliance with security standards across business units and platforms; report gaps and remediation strategies.
• Build data security metrics, KPIs, and dashboards to track compliance, maturity, and risk exposure.
• Drive innovation in data security to address evolving threats, regulations (GDPR/HIPAA/CCPA) and standards (NIST/ISO 27001).
• Collaborate across engineering, compliance, privacy, and risk to embed data protection in strategies.
• Perform security reviews, identify gaps, and drive continuous improvement in data protection across multi-cloud.

Skills

Cloud security

Data security engineering

AWS

Azure

Data governance

DSPM

Secure configurations

Python/PowerShell

RLS/CLS

Tools

Databricks

Azure Synapse

AWS Redshift

Palantir

Job description

Job Description

You will work within the CT&E Team

This team is responsible for response and management of cyber incidents, using an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, this team also establishes engineering principles and improves the technology stack to continuously bolster bp's cybersecurity posture.

What you will deliver

• Improve and maintain enterprise data security standards and frameworks covering Data Classification, encryption, data retention, data access governance, and monitoring, with a mandatory focus on securing AWS and Azure cloud environments.


• Work with security architects and platform teams to ensure secure-by-default configurations and data handling practices across AWS, Azure, and saas platforms.


• Maintain baselines for data protection tools and technologies across structured and unstructured data, including modern data platforms.


• Monitor compliance with security standards and policies across business units and platforms; report gaps and recommend remediation strategies.


• Build data security metrics, KPIs, and dashboards to track compliance, maturity, and risk exposure.


• Bring data security innovation to stay ahead of evolving threats, technologies, regulations (e.g., GDPR, HIPAA, CCPA), and industry standards (e.g., NIST, ISO 27001) including advancements in AI security and the use of AI in security operation.


• Collaborate across engineering, compliance, privacy, and risk teams to embed data protection principles into business and technical strategies.


• Perform security reviews, identify gaps, and drive continuous improvement in data protection practices across the multi-cloud environment.

What you will need to be successful (experience and qualifications)

• 9+ years of experience in cybersecurity, with at least 4 years specifically in Data Security, including areas such as data protection engineering, and handling of sensitive data in hybrid and cloud environment.


• Mandatory expertise in cloud security across AWS and Azure, including implementation of data protection controls in cloud-native environments.


• experience working with modern data platforms such as Databricks, Azure Synapse, and AWS Redshift or Palantir with a focus on securing data pipelines and analytical workloads.


• Strong understanding of database security concepts including Row-Level Security (RLS), Column-Level Security (CLS), and Data Security Posture Management (DSPM).


• Strong understanding of data encryption, key management, network/data segmentation, and Zero Trust principles.


• Familiarity with cloud-native data services and how to apply data security controls across AWS, Azure, and hybrid environments.


• Ability to read and write code/scripts to support automation or compliance tooling (e.g., Python, PowerShell, JSON/YAML for IaC).


• experience with data governance tools such as Databricks Unity Catalog, Microsoft Purview Data Map, and ETL processes is good to have


• Exposure to AI security and the application of AI in enhancing security capabilities. would be added advantage


• Good communication, collaboration and stakeholder engagement skills

Why join bp

Our purpose is to deliver energy to the world, today and tomorrow. For over 100 years, bp has focused on discovering, developing, and producing oil and gas in the nations where we operate. We are one of the few companies globally that can provide governments and customers with an integrated energy offering. Delivering our strategy sustainably is fundamental to achieving our ambition to be a net zero company by 2050 or sooner! At bp, we support our people to learn and grow in a diverse and high-reaching environment. We are committed to fostering an inclusive environment in which everyone is respected and treated fairly.

Disclaimer

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. Even though the job is advertised as full time, please contact the hiring manager or the recruiter as flexible working arrangements may be considered. We believe that our team is strengthened by diversity. We are committed to crafting an inclusive environment in which everyone is respected and treated fairly. There are many aspects of our employees lives that are important, so we offer benefits to enable your work to fit with your life. These benefits can include flexible working options, collaboration spaces in a modern office environment, and many others benefits.

What you can expect from us!

Our commitment to diversity, equity and inclusion: At bp, you could be part of Business Resource Groups (BRGs) which believe in the power of inclusion, deeper connections, and shared experiences. They provide a place for employees to learn and share knowledge, to connect, and to improve. The BRGs focus on and encourage talent engagement, development, and retention while creating a broadened sense of community and inclusion for bp employees. The groups cultivate leadership growth by involving employees in developmental opportunities they would not otherwise have access to. Formal and informal mentoring also helps employees develop their professional goals and connect with colleagues. The BRGs’ dedication to growth at all levels helps employees feel more engaged and energized. The BRGs break down barriers, so we can all do better together. Examples of BRGs include (but are not limited to): bpWIN (bp Women’s International Network) Pride Working parents PEN (Positively Ethnic Network) bpInclusia (bp’s Asian community) bpEnerga (bp’s Latin community)