Application and Data Security Specialist

Company

About Us

Technology Stack

Role Overview

The Application & Data Security Specialist is responsible for designing, implementing, and administering enterprise data privacy, data governance, and data security capabilities leveraging Microsoft Purview. The role ensures sensitive data discovery, data governance, data privacy, data classification, sensitive labelling and protection, compliance alignment, and risk reduction across structured and unstructured data sources.

Key Responsibilities

Data Discovery & Classification

• Configure Purview Data Map, scanning, and classification rules
• Build automatic & manual sensitivity labeling policies
• Develop custom sensitive information types & classifiers

Data Governance

• Develop and maintain Purview Data Catalog & Business Glossary
• Configure metadata harvesting for on-prem and cloud sources
• Define lineage and asset mapping for applications and pipelines

Data Security & Privacy Controls

• Implement Microsoft Information Protection labeling
• Configure Data Loss Prevention (DLP) rules
• Apply encryption, access restrictions & sharing controls
• Manage insider risk policy configuration

Data Compliance Management

• Map regulatory controls in Purview Compliance Manager
• Configure retention/records management policies
• Support data sovereignty, residency & privacy programs

Platform Engineering & Integration

• Integrate Purview with Azure services, Clinical, Financial, and Business Applications
• Automate scanning schedules and onboarding of new data sources
• Enable API/PowerShell/Graph automation

Monitoring, Reporting & Risk Analytics

• Develop dashboards for data exposure, sensitivity, and DLP findings
• Generate metrics for leadership review
• Support SIEM integration with Microsoft Sentinel

Required Skills & Qualifications

Technical Skills

• Strong Hands-on experience with Microsoft Purview in the following areas

Data Map Scanning, metadata ingestion, lineage mapping, and onboarding of multi-cloud/on-prem data sources.

Data Catalog Business glossary development, asset onboarding, metadata enrichment, and stewardship workflows.

Classification & Labelling Automated/manual sensitivity labelling, custom classifiers, encryption/rights protection, and lifecycle retention integration.

DLP – Design and tuning of data loss prevention policies across cloud, collaboration, email, and endpoints, including SIEM/Sentinel integration.

Insider Risk – Policy configuration, behavioral analytics, event investigation, workflow orchestration, and alert tuning.

• Working Experience with Azure Active Directory / Entra Integration
• Knowledge of Microsoft 365 Compliance & Security Stack
• Data Source Familiarity: SQL, Blob, SharePoint, Exchange, Teams
• Good Understanding of Metadata & Lineage concepts
• Good Experience with Automation & Scripting: PowerShell, KQL, API usage

Experience & Education

• 4 to 7 years of experience in Identity & Access Management / Cybersecurity.
• Bachelor’s degree in Computer Science, Information Security, or related field (preferred).

Preferred Certifications

Microsoft Security, Compliance, or Data-related certifications (Purview, SC series)

Cloud Security certifications (added advantage)

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Key Competencies

• Problem Solving and Analytical Thinking
• Communication and Excellent stakeholder communication
• Documentation and process orientation
• Security-first mindset with business awareness
• Cross Functional Collaboration

What We Offer

• Dynamic startup culture with rapid career progression.
• Competitive compensation and benefits.
• Opportunity to work on projects with leading US-based Clients
• Modern workspace at STPI Tower, Taramani, Chennai.