Senior Data Security Engineer at Intapp

Job description

Job Description Summary We are seeking an experienced Senior Data Security Engineer to own and evolve Intapp's data protection programme across our global SaaS and Corporate environments. This is a senior individual-contributor role embedded within our Global Cybersecurity Operations team, with a primary focus on the Microsoft Purview platform and the broader suite of data and information protection controls that safeguard Intapp's most sensitive data assets. This role sits at the intersection of security engineering, compliance, and data governance. In addition to the primary data protection mandate, the role provides critical backfill capability across both Corporate IT Security (endpoint and email security) and Cloud Security (vulnerability and posture management) functions within the SecOps team. Job Description This role suits a security professional who combines deep Microsoft Purview technical expertise with a rigorous, policy-minded approach to data governance. You think in data flows, classification taxonomies, and risk — translating policy intent into enforced technical controls at scale. You are comfortable working autonomously, owning complex cross-functional workstreams, and communicating outcomes clearly to security leadership and business stakeholders. Key Responsibilities: Microsoft Purview Platform Management Microsoft Purview & Data Protection: Own the administration and optimisation of Microsoft Purview, including sensitivity labels, data classification, retention policies, auditing, eDiscovery, and information protection across Microsoft 365 and Azure. Data Loss Prevention (DLP): Design, implement, and continuously improve DLP policies across Microsoft 365, endpoints, and cloud environments. Investigate policy violations, manage incidents, and develop custom sensitive information classifiers. Information Governance: Maintain enterprise data classification standards and information protection policies, ensuring alignment with regulatory requirements such as GDPR, CCPA, and ISO 27001. Monitor data protection effectiveness and provide governance reporting. Security Operations Integration: Integrate Purview with Microsoft Sentinel, develop monitoring and analytics capabilities, and support insider risk investigations and data-related security incidents. Additional Security Operations: Provide secondary operational support across Microsoft Defender for Endpoint and Office 365, vulnerability management, and cloud security posture management (CSPM) across Azure and AWS, including alert investigation, policy tuning, vulnerability remediation, and security posture reporting. Required Experience & Skills: 6+ years in Information Security, with 3–5 years of focused experience in data protection, information protection, or data governance centred on Microsoft Purview and DLP. Deep, hands-on expertise with Microsoft Purview — including Information Protection, DLP, Data Lifecycle Management, Audit, eDiscovery, and the Compliance portal. Familiarity with endpoint and email security tooling (e.g., Microsoft Defender for Endpoint, Microsoft Defender for Office 365) is preferred; hands-on alert triage or policy administration experience is a plus. Solid knowledge of relevant data protection regulations: GDPR, CCPA, ISO 27001 Annex A, NIST SP 800-53, CIS Controls. Familiarity with vulnerability management and/or CSPM tooling (e.g, Defender VM, Defender for Cloud preferable or similar tooling experience); applied hands-on experience is strongly preferred. Proficiency with PowerShell and Microsoft Graph API for Purview/M365 administration and automation. Preferred Qualifications: Certifications: SC-400 (highly regarded), AZ-500 (highly regarded), SC-200, SC-300, CISM, CISSP, or equivalent beneficial. Experience integrating Purview signals with Microsoft Sentinel, including KQL development and analytics rules. SaaS provider or cloud-first enterprise experience. Technical degree in Computer Science, Information Security, or relat