Senior DLP Engineer- Data Protection Solution Owner

At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where ,Health for all, Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our capabilities and redefining ‘impossible’. There are so many reasons to join us. If you’re hungry to build a varied and meaningful career in a community of brilliant and diverse minds to make a real difference, there’s only one choice.

Senior DLP Engineer- Data Protection Solution Owner 

For Digital Hub Warsaw, we are looking for:

Senior DLP Engineer- Data Protection Solution Owner

(Title stated in the contract: Sr Cyber Security Engineer)

The Cyber Data Defense (CDD) Squad is seeking a Senior DLP Engineer to design, build, and operationalize enterprise data protection controls across our Microsoft Purview and Netskope platforms. This is an advanced individual-contributor role that owns complex technical execution end-to-end and may be asked to operate as a Solution Owner- holding accountability for a specific DLP tool stack (e.g., Purview email DLP or Netskope endpoint/inline DLP), its backlog, and its operational stability.

The ideal candidate bridges security engineering, platform operations, and vendor management, and can lead a workstream or technical domain without requiring day-to-day direction. This role supports Bayer's migration from Forcepoint to Purview and Netskope and the maturation of the DLP program across a highly regulated, multinational environment.

Expectations include:

• Ownership of complex execution- owns non-trivial deliverables, workstreams, or a technical/functional domain; accountable for quality, completeness, and effectiveness of outcomes.
• Advanced problem solving- resolves complex, cross-cutting problems; interprets standards and frameworks and applies them to real-world scenarios, balancing technical, risk, compliance, and operational considerations.
• Leadership through expertise- acts as a go-to expert, guides and reviews the work of others, and is capable of leading implementations or investigations end-to-end.
• Cross-team influence- works effectively across teams and functions, influencing through expertise and collaboration rather than authority.
• Continuous improvement- improves process, tooling, and quality; contributes to standards and practices but does not own them at enterprise scale.

At Bayer, we are committed to transparency, equal pay for equal work or work of equal value, and objective reward practices in line with EU and local regulations. The minimum monthly gross compensation for this role is 20 240 PLN, with final pay determined based on objective factors such as experience, qualifications, scope of responsibility, and internal alignment.

This position is eligible for variable pay components, such as performance based bonuses, awarded in accordance with the applicable employee group, role scope, and compensation structure.

Your Tasks & Responsibilities:

DLP Engineering & Operations

• Design, build, tune, and maintain DLP policies, profiles, SITs, and detection logic across Microsoft Purview and Netskope (endpoint, network/inline, web, and email channels).
• Test and validate policies across pre-prod and production environments prior to rollout, ensuring no new coverage gaps are introduced.
• Automate policy deployment, rule tuning, exception handling, and alert enrichment; integrate DLP telemetry with SIEM/SOAR (e.g., Sentinel/Defender).
• Solution Ownership (as assigned)
• Research and implement DLP solutions that align with the Service Owner-defined strategy and guidance.
• Adapt service-level test and deployment plans to the solution and document compliance.
• Own the solution backlog, ensuring alignment with quarterly goals.
• Manage the ServiceNow support queue and Service Desk relationship and represent DLP Operations during incidents (escalating major incidents to the Service Owner).
• Manage vendor account and technical relationships for standard business, support issues, and license/contract renewals.
• Validate consistency and governance for SITs and policies across tools.
• Provide onboarding support to Policy Engineers where necessary.

Collaboration & Continuous Improvement

• Partner with the Networking/SASE team, Data Protection Squad, Data Privacy, and Works Council stakeholders to enable compliant, well-scoped enforcement.
• Develop metrics and dashboards for policy effectiveness, false positive/negative rates, and coverage; drive tuning feedback loops.
• Create and maintain clear technical and change documentation and act as a translation layer between business requirements and technical enforcement.

 Qualifications & Competencies (education, skills, experience):

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• Several years of hands-on experience in DLP, data protection, or cybersecurity engineering.
• Demonstrated ownership of complex technical deliverables or a technical domain with minimal supervision.
• Strong scripting/automation skills (e.g., Python, PowerShell) and experience with APIs and system integrations.
• Working knowledge of data classification concepts, structured/unstructured data, and enterprise data flows.
• Understanding of data protection regulations and compliance frameworks (e.g., GDPR, HIPAA).
• Strong communication skills with both technical and non-technical stakeholders.

Preferred Qualifications

• Experience working with tools such as Microsoft Purview, Netskope, Forcepoint, or Orca.
• Experience owning a security tool/solution, including backlog management, vendor coordination, and incident representation.
• Familiarity with policy-as-code frameworks and Git-based CI/CD workflows for security controls.
• Experience with DSPM, insider risk, and SIEM/SOAR integrations (Sentinel, Defender, Exabeam).
• Experience operating in cross-functional, global, and highly regulated environments.

Success Measures (First 6-12 Months)

• Owned solution operating stably with a healthy, prioritized backlog in ADO.
• Improved alert fidelity and policy consistency across platforms.
• Effective vendor and cross-team relationships enabling smooth support and change management.

In addition, Bayer offers a competitive and holistic benefits package, including:

• Medical care above statutory requirements
• Flexible benefits supporting leisure, and well being/sports programs
• Life, accident, and disability insurance through group coverage
• Employer supported pension plans with regular company contributions
• Home office allowance to support hybrid or remote work
• Extra Paid Holidays
   

Benefits may vary depending on country, role, and employment conditions. 

You feel you do not meet all criteria we are looking for? That doesn't mean you aren't the right fit for the role. Apply with confidence, we value potential over perfection.

WORK LOCATION: WARSAW AL.JEROZOLIMSKIE 158

Bayer welcomes applications from all individuals, regardless of race, national origin, gender, age, physical characteristics, social origin, disability, union membership, religion, family status, pregnancy, sexual orientation, gender identity, gender expression or any unlawful criterion under applicable law. We are committed to treating all applicants fairly and avoiding discrimination.

Bayer is committed to providing access and reasonable accommodations in its application process for individuals with disabilities and encourages applicants with disabilities to request any needed accommodation(s) using the contact information below. 

Bayer offers the possibility of working in a hybrid model. We know how important work-life balance is, so our employees can work from home, from the office or combine both work environments. The possibilities of using the hybrid model are each time discussed with the manager.
Bayer respects and applies the Whistleblower Act in Poland.

Location:

Poland : Mazowieckie : Warszawa  

Division:

CSF

Reference Code:

877306