Grupo QuintoAndar | Security Engineer (DataSecurity)
On-siteSão Paulo, São Paulo, Brazil
Job Summary
Design comprehensive data protection strategies across Data Lakes, cloud storage, and SaaS environments. Lead the implementation of Data Security Posture Management tools to discover and monitor sensitive data continuously. Partner with Data Engineering teams to embed security controls into ETLs and pipelines using masking, anonymization, and tokenization. Architect Data Loss Prevention ecosystems and write automation scripts to triage alerts and orchestrate incident response. Enforce encryption, retention, and sharing policies using Infrastructure as Code across AWS and GCP platforms. Act as the technical bridge between CyberSecurity, Data Governance, Legal, and IT to translate privacy frameworks into scalable guardrails.
Required Qualifications
- Deep Data Security Expertise: Strong conceptual and practical understanding of data protection techniques: Data Loss Prevention (DLP), encryption (at-rest and in-transit), tokenization, hashing, and dynamic data masking.
- Cloud & Data Ecosystems: Practical experience securing modern data architectures (Data Lakes, Data Warehouses) and cloud-native storage in AWS or GCP (e.g., S3, RDS, BigQuery, Databricks).
- Scripting & Automation: Proficiency in scripting languages (like Python or Bash) to interact with APIs, build automations, and integrate security tools.
- Analytical Problem Solving: Strong ability to threat-model complex data flows, identify exposure risks, and design pragmatic mitigation strategies without blocking business agility.
- Languages: Fluency in Portuguese and advanced English
Desired Qualifications
- Have hands-on experience implementing and scaling Data Security Posture Management (DSPM) platforms (e.g., Cyera, Wiz, Securiti.ai, BigID) in enterprise environments.
- Have a background in Data Engineering or database administration, giving you a deep understanding of how complex data pipelines (Airflow, Spark, Kafka) operate from the inside out.
- Possess deep knowledge of applied cryptography and enterprise key management systems (e.g., AWS KMS, HashiCorp Vault).
- Have practical experience using AI tools or LLMs to speed up data classification, reduce false positives in DLP, or automate security engineering tasks.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.