Data Platform Security Engineer: Access & Data Protection

北京汉克时代科技有限公司; Kuala Lumpur; On-site; MYR 120,000 - 210,000; Full time

Job summary

Beijing Hank时代科技有限公司 seeks an experienced security-focused cloud/data platform engineer to design and maintain access management as code across Azure, Snowflake, PostgreSQL, streaming and BI tools using Terraform.

You will implement data protection controls, secure monitoring, CI/CD security gates, and incident response processes, with English communication and occasional international travel.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or equivalent.
• 3+ years in cloud or data platform engineering, including hands-on security work.
• Working understanding of GDPR principles (data minimisation, pseudonymisation, personal data handling).
• Fluent English; able to work Central European business hours and travel internationally at short notice.
• Security experience for Kafka, Event Hub, Service Bus, Flink, NiFi, Airflow, or Azure Functions.
• High availability/disaster recovery on Azure; managed service experience with a European client.

Responsibilities

• Access management as code across Azure, Snowflake, PostgreSQL, streaming and BI tools using Terraform with tiered access.
• Implement tiered access (full, masked, metadata-only) and just-in-time access.
• Data protection controls: masking, row-access policies, encryption, Key Vault, and API security.
• Secure remote access: locked-down virtual desktops, Private Link, network segmentation.
• Security monitoring: write detections in Splunk/Grafana and ensure audit logs are complete.
• CI/CD security: add security gates to pipelines and review new integrations before production.
• Incident response: handle security incidents and provide evidence for audits.

Skills

Security mindset

Incident response

Threat detection

Cloud security

RBAC design

Cross-functional collaboration

Education

Bachelor's degree in Computer Science, Engineering, or equivalent

Tools

Terraform

Azure DevOps

GitHub Actions

Key Vault

Snowflake

PostgreSQL

Flink

Job description

Beijing Hank时代科技有限公司 seeks an experienced security-focused cloud/data platform engineer to design and maintain access management as code across Azure, Snowflake, PostgreSQL, streaming and BI tools using Terraform.

You will implement data protection controls, secure monitoring, CI/CD security gates, and incident response processes, with English communication and occasional international travel.