Data Security Engineer

The Data Security Engineer is responsible for implementing and maintaining security controls that protect data at rest, in transit, and in use. They focus on encryption, data loss prevention (DLP), access controls, monitoring to prevent unauthorized access and ensuring compliance with data regulations.

We’re looking for a Data Security Engineer (m/f/d) to join our growing global team in Madrid and help implement, secure, and evolve the digital backbone of our enterprise. This is your chance to make an impact on projects that touch every corner of our organization-while working in a modern environment that values both collaboration and flexibility.

The working location for this position will be in Madrid city where we are currently setting up a new office. We operate a hybrid model, requiring at least 40% of the working time on-site.

Creating passion: your responsibilities

• Implement and manage encryption solutions (AES, RSA, TLS, HSMs, PKI)
• Ensure secure key management practices using KMIP, AWS KMS, Azure Key Vault, securing data across Multi-Cloud and on-premise environments
• Implement data encryption techniques (e.g. masking, anonymization) across databases, cloud storage, and applications
• Deploy and manage Data Loss Prevention (DLP) solutions (e.g. Microsoft Purview, Symantec, Forcepoint) to monitor and prevent data exfiltration
• Conduct data classification and risk assessments, collaborate with compliance teams to formulate data security policies and procedures
• Ensure compliance with standards and frameworks such as GDPR, ISO 27001, NIST
• Collaborate with SOC/SIRT and Support on data security incidents and participate in Incident Response

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field
• 3+ years in cybersecurity, ideally as Data Security Engineer
• Following certificates are preferred: CISSP, CIPP, Cloud certifications (AWS, Azure, or GCP)
• English is a must; German and French are a plus
• Understanding of cybersecurity frameworks and standards (e.g. ISO27001, NIST, GDPR)
• Strong knowledge of data encryption standards (AES, RSA, ECC, TLS, IPsec)
• Strong experience with data encryption tools (Thales CipherTrust, AWS KMS, Azure Key Vault)
• Hands-on knowledge of DLP, SIEM, and security analytics tools

• Competitive compensation and benefits package that recognizes your expertise
• Flexible and hybrid working model
• Creative freedom and responsibility to shape processes and solutions in our global transformation
• Continuous learning and development with tailored training and certification opportunities
• Meal vouchers
• Life and accident insurance
• Option to include a premium private health insurance package as part of the flexible remuneration
• A safe, stable and international workplace within a trusted family business that invests in people