Data Security Engineer

Intapp; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Equity/Stock in Intapp

One time home office stipend

Generous paid parental leave

Meal allowance

Training reimbursement

Job summary

Intapp is seeking an experienced Senior Data Security Engineer to own and evolve our data protection programme across global SaaS and Corporate environments. This senior IC role sits within Global Cybersecurity Operations, focusing on the Microsoft Purview platform and the broader suite of data protection controls that safeguard Intapp's data assets.

You will lead DLP design, governance, and Purview administration, integrating with Sentinel and Defender tools, while ensuring policy alignment

Qualifications

• 6+ years in Information Security.
• Hands-on expertise with Microsoft Purview including Information Protection, DLP, and eDiscovery.
• Experience integrating Purview signals with Microsoft Sentinel and analytics rules.

Responsibilities

• Own the administration and optimization of Microsoft Purview across Microsoft 365 and Azure.
• Design and implement DLP policies across platforms and investigate violations.
• Maintain data classification standards and information protection policies in line with GDPR, CCPA, and ISO27001.
• Provide governance reporting and security operations integration with Sentinel and Defender suites.
• Backfill security operations tasks across endpoint, email, CSPM, and cloud security posture management.

Skills

Security governance

Policy-minded

Cross-functional collaboration

Communication with leadership

Education

Technical degree in Computer Science / Information Security

Tools

Microsoft Purview

Microsoft Defender for Endpoint

Microsoft Defender for Office365

Microsoft Sentinel

PowerShell

Microsoft Graph API

KQL

Azure

M365

Job description

Задачи

We are seeking an experienced Senior Data Security Engineer to own and evolve Intapp's data protection programme across our global SaaS and Corporate environments. This is a senior individual‑contributor role embedded within our Global Cybersecurity Operations team, with a primary focus on the Microsoft Purview platform and the broader suite of data and information protection controls that safeguard Intapp's most sensitive data assets. This role sits at the intersection of security engineering, compliance, and data governance. In addition to the primary data protection mandate, the role provides critical backfill capability across both Corporate IT Security (endpoint and email security) and Cloud Security (vulnerability and posture management) functions within the SecOps team. This role suits a security professional who combines deep Microsoft Purview technical expertise with a rigorous, policy‑minded approach to data governance. You think in data flows, classification taxonomies, and risk — translating policy intent into enforced technical controls at scale. You are comfortable working autonomously, owning complex cross‑functional workstreams, and communicating outcomes clearly to security leadership and business stakeholders. Microsoft Purview Platform Management Microsoft Purview & Data Protection: Own the administration and optimisation of Microsoft Purview, including sensitivity labels, data classification, retention policies, auditing, eDiscovery, and information protection across Microsoft 365 and Azure. Data Loss Prevention (DLP): Design, implement, and continuously improve DLP policies across Microsoft 365, endpoints, and cloud environments. Investigate policy violations, manage incidents, and develop custom sensitive information classifiers. Information Governance: Maintain enterprise data classification standards and information protection policies, ensuring alignment with regulatory requirements such as GDPR, CCPA, and ISO27001. Monitor data protection effectiveness and provide governance reporting. Security Operations Integration: Integrate Purview with Microsoft Sentinel, develop monitoring and analytics capabilities, and support insider risk investigations and data‑related security incidents. Additional Security Operations: Provide secondary operational support across Microsoft Defender for Endpoint and Office365, vulnerability management, and cloud security posture management (CSPM) across Azure and AWS, including alert investigation, policy tuning, vulnerability remediation, and security posture reporting. Purview sensitivity label coverage at or above agreed enterprise target, with auto‑labelling operational for key sensitive data types. DLP policy framework deployed across Exchange, SharePoint, OneDrive, Teams, and Endpoint — with documented tuning cycle and false‑positive rate within tolerance. Information Protection Policy reviewed, updated, and formally owned, with training delivered to key stakeholder groups. Vulnerability management and posture management backfill effective across Cloud Security — scan cadence maintained, remediation tracked, and posture reporting delivered to leadership. Endpoint and email security backfill effective — Defender for Endpoint and Defender for Office365 alert triage SLAs met, with incident coordination handed off cleanly to Corporate IT Security. Ensure accurate reporting data is presented including key security metrics that are included in dashboards for tabling at Security Governance committees and forums.

Требования

6+ years in Information Security, with 3–5 years of focused experience in data protection, information protection, or data governance centred on Microsoft Purview and DLP. Deep, hands‑on expertise with Microsoft Purview — including Information Protection, DLP, Data Lifecycle Management, Audit, eDiscovery, and the Compliance portal. Familiarity with endpoint and email security tooling (e.g., Microsoft Defender for Endpoint, Microsoft Defender for Office365) is preferred; hands‑on alert triage or policy administration experience is a plus. Solid knowledge of relevant data protection regulations: GDPR, CCPA, ISO27001 AnnexA, NISTSP800‑53, CIS Controls. Familiarity with vulnerability management and/or CSPM tooling (e.g, Defender VM, Defender for Cloud preferable or similar tooling experience); applied hands‑on experience is strongly preferred. Proficiency with PowerShell and Microsoft Graph API for Purview/M365 administration and automation. Certifications: SC‑400 (highly regarded), AZ‑500 (highly regarded), SC‑200, SC‑300, CISM, CISSP, or equivalent beneficial. Experience integrating Purview signals with Microsoft Sentinel, including KQL development and analytics rules. SaaS provider or cloud‑first enterprise experience. Technical degree in Computer Science, Information Security, or related discipline. Experience operating Microsoft Defender for Endpoint and/or Microsoft Defender for Office365 in a SOC, IT security, or security engineering capacity.

Условия

Our culture at Intapp emphasizes accountability, responsibility, and growth. We support each other in a positive, open atmosphere that fosters creativity, approachability, and teamwork. We’re committed to creating a modern work environment that’s connected yet flexible, supporting both professional success and work‑life balance.

In return for your passion, commitment, and collaborative approach, we offer: Attractive compensation – including competitive base pay and performance based variable pay. Equity/Stock in Intapp. Opportunity to travel to other development centers for product training and cross‑site collaboration. One time home office stipend. Generous paid parental leave (including adoptive leave), marriage leave, bereavement leave, carer’s leave and paid sick days. Meal allowance. Reimbursement for training towards continuing education.

Intapp provides equal employment opportunities to all qualified applicants and will make hiring decisions without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristic protected by federal, state or local laws.