Senior DLP Engineer- Data Protection Solution Owner

Bayer AG; Warszawa; Hybrid; PLN 206,000 - 246,000; Full time

Benefits offered by this job

Medical care

Flexible benefits

Life insurance

Pension plan

Home office allowance

Job summary

Bayer AG in Warsaw is seeking a Senior DLP Engineer to design, build, and operate enterprise data protection controls across Microsoft Purview and Netskope. This advanced individual-contributor role owns complex technical execution end-to-end and may lead a workstream or domain.

The candidate will bridge security engineering, operations, and vendor management, support migration from Forcepoint to Purview and Netskope, and contribute to a mature DLP program in a highly regulated environment.

Qualifications

• Bachelor’s degree in CS or information security, or equivalent experience.
• Hands-on experience in DLP, data protection, or cybersecurity engineering.
• Owns complex technical deliverables with minimal supervision.
• Strong scripting/automation skills and API integrations.
• Knowledge of data classification and enterprise data flows.
• Familiar with GDPR and HIPAA compliance.

Responsibilities

• Design, build, tune, and maintain DLP policies across Purview and Netskope.
• Test and validate policies in pre-prod and production environments.
• Automate policy deployment and alert enrichment; integrate with SIEM/SOAR.
• Own the solution backlog and manage the ServiceNow queue.
• Collaborate with cross-functional teams to ensure compliant enforcement.
• Develop metrics and dashboards for policy effectiveness.

Skills

Python

PowerShell

APIs

Scripting

Data classification

GDPR

HIPAA

Communication

Education

Bachelor's degree in CS/InfoSec or related field

Tools

Microsoft Purview

Netskope

Forcepoint

Orca

Job description

Select how often (in days) to receive an alert:

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where ,Health for all, Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice.

For Digital Hub Warsaw, we are looking for:

(Title stated in the contract: Sr Cyber Security Engineer)

The Cyber Data Defense (CDD) Squad is seeking a Senior DLP Engineer to design, build, and operationalize enterprise data protection controls across our Microsoft Purview and Netskope platforms. This is an advanced individual-contributor role that owns complex technical execution end-to-end and may be asked to operate as a Solution Owner- holding accountability for a specific DLP tool stack (e.g., Purview email DLP or Netskope endpoint/inline DLP), its backlog, and its operational stability.

The ideal candidate bridges security engineering, platform operations, and vendor management, and can lead a workstream or technical domain without requiring day-to-day direction. This role supports Bayer's migration from Forcepoint to Purview and Netskope and the maturation of the DLP program across a highly regulated, multinational environment.

Expectations include:

• Ownership of complex execution- owns non-trivial deliverables, workstreams, or a technical/functional domain; accountable for quality, completeness, and effectiveness of outcomes.
• Advanced problem solving- resolves complex, cross-cutting problems; interprets standards and frameworks and applies them to real-world scenarios, balancing technical, risk, compliance, and operational considerations.
• Leadership through expertise- acts as a go-to expert, guides and reviews the work of others, and is capable of leading implementations or investigations end-to-end.
• Cross-team influence- works effectively across teams and functions, influencing through expertise and collaboration rather than authority.
• Continuous improvement- improves process, tooling, and quality; contributes to standards and practices but does not own them at enterprise scale.

At Bayer, we are committed to transparency, equal pay for equal work or work of equal value, and objective reward practices in line with EU and local regulations. The minimum monthly gross compensation for this role is 20 240 PLN, with final pay determined based on objective factors such as experience, qualifications, scope of responsibility, and internal alignment.

This position is eligible for variable pay components, such as performance based bonuses, awarded in accordance with the applicable employee group, role scope, and compensation structure.

Your Tasks & Responsibilities:

• Design, build, tune, and maintain DLP policies, profiles, SITs, and detection logic across Microsoft Purview and Netskope (endpoint, network/inline, web, and email channels).
• Test and validate policies across pre-prod and production environments prior to rollout, ensuring no new coverage gaps are introduced.
• Automate policy deployment, rule tuning, exception handling, and alert enrichment; integrate DLP telemetry with SIEM/SOAR (e.g., Sentinel/Defender).
• Solution Ownership (as assigned)
• Research and implement DLP solutions that align with the Service Owner-defined strategy and guidance.
• Adapt service-level test and deployment plans to the solution and document compliance.
• Own the solution backlog, ensuring alignment with quarterly goals.
• Manage the ServiceNow support queue and Service Desk relationship and represent DLP Operations during incidents (escalating major incidents to the Service Owner).
• Manage vendor account and technical relationships for standard business, support issues, and license/contract renewals.
• Validate consistency and governance for SITs and policies across tools.
• Provide onboarding support to Policy Engineers where necessary.
• Partner with the Networking/SASE team, Data Protection Squad, Data Privacy, and Works Council stakeholders to enable compliant, well-scoped enforcement.
• Develop metrics and dashboards for policy effectiveness, false positive/negative rates, and coverage; drive tuning feedback loops.
• Create and maintain clear technical and change documentation and act as a translation layer between business requirements and technical enforcement.

Qualifications & Competencies (education, skills, experience):

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• Several years of hands-on experience in DLP, data protection, or cybersecurity engineering.
• Demonstrated ownership of complex technical deliverables or a technical domain with minimal supervision.
• Strong scripting/automation skills (e.g., Python, PowerShell) and experience with APIs and system integrations.
• Working knowledge of data classification concepts, structured/unstructured data, and enterprise data flows.
• Understanding of data protection regulations and compliance frameworks (e.g., GDPR, HIPAA).
• Strong communication skills with both technical and non-technical stakeholders.

Preferred Qualifications

• Experience working with tools such as Microsoft Purview, Netskope, Forcepoint, or Orca.
• Experience owning a security tool/solution, including backlog management, vendor coordination, and incident representation.
• Familiarity with policy-as-code frameworks and Git-based CI/CD workflows for security controls.
• Experience with DSPM, insider risk, and SIEM/SOAR integrations (Sentinel, Defender, Exabeam).
• Experience operating in cross-functional, global, and highly regulated environments.

Success Measures (First 6-12 Months)

• Owned solution operating stably with a healthy, prioritized backlog in ADO.
• Improved alert fidelity and policy consistency across platforms.
• Effective vendor and cross-team relationships enabling smooth support and change management.

In addition, Bayer offers a competitive and holistic benefits package, including:

• Medical care above statutory requirements
• Flexible benefits supporting leisure, and well being/sports programs
• Life, accident, and disability insurance through group coverage
• Employer supported pension plans with regular company contributions
• Home office allowance to support hybrid or remote work

Benefits may vary depending on country, role, and employment conditions.

WORK LOCATION: WARSAW AL.JEROZOLIMSKIE 158

YOUR APPLICATION

Bayer welcomes applications from all individuals, regardless of race, national origin, gender, age, physical characteristics, social origin, disability, union membership, religion, family status, pregnancy, sexual orientation, gender identity, gender expression or any unlawful criterion under applicable law. We are committed to treating all applicants fairly and avoiding discrimination.

Bayer is committed to providing access and reasonable accommodations in its application process for individuals with disabilities and encourages applicants with disabilities to request any needed accommodation(s) using the contact information below.

Bayer offers the possibility of working in a hybrid model. We know how important work-life balance is, so our employees can work from home, from the office or combine both work environments. The possibilities of using the hybrid model are each time discussed with the manager.
Bayer respects and applies the Whistleblower Act in Poland.