Senior Security Engineer Privacy and Data Security

You will design and implement encryption, key management, data discovery, classification, and protection controls for a multi-tenant cloud platform. You will build data-subject-rights capabilities, translate GDPR requirements into technical controls, produce audit evidence, support customer due diligence, and work across privacy, security, legal, and compliance requirements.

Responsibilities

• Design and implement encryption, key management, and key rotation controls
• Establish PII discovery, data classification, and data-flow mapping
• Implement DLP, pseudonymization, tokenization, access control, and data residency controls
• Build capabilities to locate, export, and delete personal data
• Embed privacy-by-design controls into product and platform design
• Design supplementary measures for cross-border data transfers
• Translate GDPR requirements into technical controls and technical measures
• Produce and archive compliance evidence
• Map controls to SOC 2, ISO 27001, and ISO 27701
• Respond to customer security and privacy due diligence
• Maintain technical measures and security questionnaires

Requirements

• 5–8 years of hands-on security or data security experience
• Experience delivering encryption, KMS, HSM, and cloud security
• Knowledge of privacy engineering, data-flow mapping, DSAR implementation, data minimization, and de-identification
• Knowledge of GDPR, TOMs, SCC Annex II, and DPA security annexes
• Knowledge of Kubernetes multi-tenant isolation and cloud platform data flows
• Hands-on end-to-end GDPR, DPA, or equivalent privacy compliance implementation experience
• Experience with SOC 2, ISO 27001, or ISO 27701
• Policy-as-code and automated compliance evidence collection experience
• Mandarin and English proficiency