Senior Data Security Engineer; DSPM & Data Protection

Position: Senior Data Security Engineer (DSPM & Data Protection)
Senior Data Security Engineer (DSPM & Data Protection)

Location:

Knutsford, Cheshire (Hybrid: 3 days in office / 2 days remote)

Duration:
Long-term contract (Until July 2026)

Rate: £550 per day

IR35 Status:
Inside IR35 (Umbrella PAYE only)

The Opportunity

Are you an expert in Data Security Posture Management (DSPM)? We are representing a global leader in digital transformation who is looking for a Senior Security Engineer to join a high-profile data protection programme for a Tier 1 Global Banking client.

This role is essential for shaping the future of the bank's data security platform. You will lead the charge in identifying sensitive data across a vast estate, automating remediation, and ensuring global compliance standards are met. This is a long-term engagement offering stability through to mid-2026.

The Role

This is a pivotal role that combines high-level security strategy with deep technical execution. You will be responsible for scanning diverse environments to identify sensitive data, recommending remediation actions, and building automated workflows to scale security operations.

Key Responsibilities:

DSPM Leadership:
Drive the expansion and enhancement of data security platforms (such as Varonis, Cyera, or BigID).
Scanning & Discovery:
Execute structured and unstructured data scans across SMB, Confluence, and Jira to identify vulnerabilities.
Automation:
Implement and optimize data discovery workflows using Python or Shell scripting for maximum scalability.
Infrastructure & Deployment:
Manage deployments using Helm charts, Kubernetes/Open Shift, and integrate services across multi-environment setups (Dev/UAT/Prod/DR).
Compliance Integration:
Customize data discovery policies and classifiers to meet global regulatory requirements (GDPR, CCPA, HIPAA).

Collaboration:

Work closely with Infrastructure, Governance, and Security teams to ensure architecture aligns with the latest software lifecycle patterns.

Your Technical Profile

To be successful, you will need 5+ years of experience in Security Engineering, Dev Ops, or Infrastructure, with a specific focus on Data Security.

Core Requirements:

DSPM Expertise:
Expert knowledge of at least one industry-leading platform (e.g., Varonis, Cyera, BigID).
Containerization:
Hands-on experience with Docker, Kubernetes, Open Shift, and Helm.
Cloud Platforms:
Proficient in AWS or Azure cloud environments.
Scripting & Data:
Strong proficiency in Python, Bash, or Power Shell, alongside solid SQL skills (SQL Server, Oracle, or Postgre

SQL).
Security Tools:

Experience with Data Loss Prevention (DLP), IAM, and secure vaults (e.g., Cyber Ark).
Frameworks:
Deep understanding of Privacy and Security frameworks (GDPR, NIST, OWASP).

Preferred Qualifications

Financial Services:
Previous experience within a highly regulated banking environment is strongly preferred.
Certification: CISSP, CISM, or equivalent cloud security certifications.
Agile:
Experience working within Scrum or Kanban frameworks using JIRA.

Working Pattern

This role follows a 60% office-based / 40% remote hybrid model. You will be based in Knutsford three days per week, benefiting from a collaborative, state-of-the-art engineering environment