Purview & DSPM AI Data Security Engineer
Listed on 2026-09-05
-
IT/Tech
Information Security & Data Protection, Cybersecurity
Note :
Shift Timings (6:30pm To 3:30am IST)
About the Role
Looking for a hands-on Microsoft Purview Engineer to build, operate, and continuously harden data-protection and compliance controls across a well-resourced Microsoft 365 E5 estate and structured data sources. This is a build-and-run engineering role at the intersection of traditional M365 compliance and emerging AI data security.
You will own end-to-end sensitivity labeling, DLP, retention, and eDiscovery across Microsoft 365 workloads; deploy and operate Data Security Posture Management for AI (DSPM for AI) to govern how sensitive data is exposed to Copilot, ChatGPT, Claude, and other LLMs; and drive PII discovery and classification in SQL Server through the Microsoft Purview Data Map. If you can turn a compliance requirement directly into working, policy-as-configuration controls across both unstructured and structured data, with minimal hand-holding this role is for you.
What You'll Do
Information Protection & DLP
Design, deploy, and tune sensitivity labels, label policies, auto-labeling, and encryption across Exchange, SharePoint, One Drive, and Teams. Author and maintain DLP policies (including Endpoint DLP on Intune-managed devices), build and validate SITs, EDM schemas, and trainable classifiers, and reduce false positives through iterative tuning.
Data Lifecycle, Records & eDiscovery
Implement retention labels and policies, disposition-review workflows, and records-management controls aligned to regulatory and legal-hold obligations (HIPAA, PCI-DSS, GLBA, SEC/FINRA, or equivalent). Run eDiscovery (Standard & Premium), content search, and legal-hold workflows, supporting Legal and HR teams with collections, exports, and case management.
Insider Risk & Communication Compliance
Configure and triage Insider Risk Management policies in partnership with HR and Legal, and manage Communication Compliance reviews for policy and regulatory requirements.
DSPM for AI AI Data Security
Deploy and operate Microsoft Purview DSPM for AI to discover and monitor how sensitive data is exposed to Microsoft 365 Copilot, Copilot Studio agents, ChatGPT, Claude, and other generative-AI applications. Run oversharing and data-risk assessments, drive remediation through sensitivity labels, access reviews, and SharePoint Advanced Management, configure AI DLP and risky-interaction detection policies, and audit AI prompts and responses producing risk-posture reports for leadership.
Structured Data Discovery & Classification (SQL Server)
Register and scan SQL Server sources (on-premises via self-hosted integration runtime, and Azure SQL) in the Purview Data Map. Configure scan rule sets and schedules, classify PII at the column level, and tune built-in and custom classifiers for personal, financial, and health data. Profile and validate findings directly in SQL Server using T-SQL, bridge structured findings into M365 controls (e.g., EDM schemas that power DLP and auto-labeling), and maintain the data catalog, classifications, and lineage.
Operations, Governance & Automation
Monitor compliance alerts across the Purview portal and Microsoft Defender, maintain Compliance Manager assessments and audit evidence, automate recurring operations via Security & Compliance Power Shell and Microsoft Graph (Security API), and document architecture decisions, runbooks, and change records.
What We're Looking For
- 4+ years in security or compliance engineering, including 2+ years hands-on with Microsoft Purview (compliance and information-protection workloads).
- Production experience with sensitivity labels, DLP policies, and retention configurations in a Microsoft 365 E5 tenant.
- Working knowledge of the broader M365 security stack:
Entra , Intune, Microsoft Defender for Endpoint, Defender for Cloud Apps, and Exchange Online. - Proficiency with Security & Compliance Power Shell for scripting and automating compliance operations.
- Solid grasp of data-classification concepts SITs, EDM schemas, and trainable classifiers and how labeling and DLP behave across M365 services.
- Hands-on experience with the Microsoft Purview Data Map: registering and scanning SQL Server sources (including self-hosted…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).