Remote Staff Data Security Engineer Job in UK GitLab

Who you are

• Proven experience in data security engineering and a strong background in deploying secure data solutions across different environments (public cloud, on-prem, etc.)
• Senior-level experience in software engineering in at least one primary programming language (Ruby, Python, NodeJS, or GoLang)
• Deep understanding of authn, authz, encryption, data sanitization, data loss prevention and disaster recovery practices
• Hands-on experience with a diverse set of data technologies, including object storage, relational/non-relational databases, key-value stores, message queues, etc.
• Familiarity with regulatory compliance and data protection standards (GDPR, CCPA, FedRAMP, HIPAA, etc.)
• Strong analytical and problem-solving skills, with the ability to reason about complex data security challenges
• Excellent communication skills, capable of working collaboratively in a fully remote, globally distributed team

What the job involves

• Design and develop comprehensive authentication and authorization frameworks for critical data stores within our SaaS, Dedicated architectures, and other customer-facing applications
• Help address data infrastructure security challenges for on-premise deployment models
• Ensure the overarching security of data infrastructure supporting diverse deployment/product architectures, including Relational and non-relational databases, Object storage, Clickhouse, Git repository data
• Contribute with security improvements and reviews for Gitaly, Git repository storage and retrieval at scale
• Design and develop paved roads for engineering teams for encryption of data in transit and at rest
• Design and help implement controls to prevent the commingling of different data types, maintaining appropriate data segregation and integrity
• Define protocols and guardrails for internal engineering and support teams when needing access to customer data, ensuring ethical and secure handling
• Help lead initiatives for data sanitization to prevent triangulation of individual identities, ensuring privacy and compliance with data protection laws
• Design, develop, and improve solutions for Data Loss Prevention
• Design, develop, and improve solutions for Backups and Disaster Recovery
• Collaborate across product and engineering teams to continuously improve our data security practices and policies