About the Role
We are seeking an experienced Senior Data Security Engineer to own and evolve Intapp's data protection programme across our global SaaS and Corporate environments. This is a senior individual-contributor role embedded within our Global Cybersecurity Operations team, with a primary focus on the Microsoft Purview platform and the broader suite of data and information protection controls that safeguard Intapp's most sensitive data assets.
This role sits at the intersection of security engineering, compliance, and data governance. In addition to the primary data protection mandate, the role provides critical backfill capability across both Corporate IT Security (endpoint and email security) and Cloud Security (vulnerability and posture management) functions within the SecOps team.
This role suits a security professional who combines deep Microsoft Purview technical expertise with a rigorous, policy-minded approach to data governance. You think in data flows, classification taxonomies, and risk — translating policy intent into enforced technical controls at scale. You are comfortable working autonomously, owning complex cross-functional workstreams, and communicating outcomes clearly to security leadership and business stakeholders.
Responsibilities
Microsoft Purview Platform Management
•Own the administration and optimisation of Microsoft Purview, including sensitivity labels, data classification, retention policies, auditing, eDiscovery, and information protection across Microsoft 365 and Azure.
•Design, implement, and continuously improve DLP policies across Microsoft 365, endpoints, and cloud environments. Investigate policy violations, manage incidents, and develop custom sensitive information classifiers.
•Maintain enterprise data classification standards and information protection policies, ensuring alignment with regulatory requirements such as GDPR, CCPA, and ISO 27001. Monitor data protection effectiveness and provide governance reporting.
•Integrate Purview with Microsoft Sentinel, develop monitoring and analytics capabilities, and support insider risk investigations and data-related security incidents.
Additional Security Operations
•Provide secondary operational support across Microsoft Defender for Endpoint and Office 365, vulnerability management, and cloud security posture management (CSPM) across Azure and AWS, including alert investigation, policy tuning, vulnerability remediation, and security posture reporting.
Outcomes Expected
•Purview sensitivity label coverage at or above agreed enterprise target, with auto-labelling operational for key sensitive data types.
•DLP policy framework deployed across Exchange, SharePoint, OneDrive, Teams, and Endpoint — with documented tuning cycle and false-positive rate within tolerance.
•Information Protection Policy reviewed, updated, and formally owned, with training delivered to key stakeholder groups.
•Vulnerability management and posture management backfill effective across Cloud Security — scan cadence maintained, remediation tracked, and posture reporting delivered to leadership.
•Endpoint and email security backfill effective — Defender for Endpoint and Defender for Office 365 alert triage SLAs met, with incident coordination handed off cleanly to Corporate IT Security.
•Ensure accurate reporting data is presented including key security metrics that are included in dashboards for tabling at Security Governance committees and forums.
Requirements
•6+ years in Information Security, with 3–5 years of focused experience in data protection, information protection, or data governance centred on Microsoft Purview and DLP.
•Deep, hands-on expertise with Microsoft Purview — including Information Protection, DLP, Data Lifecycle Management, Audit, eDiscovery, and the Compliance portal.
•Familiarity with endpoint and email security tooling (e.g., Microsoft Defender for Endpoint, Microsoft Defender for Office 365) is preferred; hands-on alert triage or policy administration experience is a plus.
•Solid knowledge of relevant data protection regulations: GDPR, CCPA, ISO 27001 Annex A, NIST SP 800-53, CIS Controls.
•Familiarity with vulnerability management and/or CSPM tooling (e.g., Defender VM, Defender for Cloud preferable or similar tooling experience); applied hands-on experience is strongly preferred.
•Proficiency with PowerShell and Microsoft Graph API for Purview/M365 administration and automation.
•Certifications: SC-400 (highly regarded), AZ-500 (highly regarded), SC-200, SC-300, CISM, CISSP, or equivalent beneficial.
•Experience integrating Purview signals with Microsoft Sentinel, including KQL development and analytics rules.
•SaaS provider or cloud-first enterprise experience.
•Technical degree in Computer Science, Information Security, or related discipline.
•Experience operating Microsoft Defender for Endpoint and/or Microsoft Defender for Office 365 in a SOC, IT security, or security engineering capacity.
What Intapp Offers
•Attractive compensation – including competitive base pay and performance based variable pay.
•Equity/Stock in Intapp.
•Opportunity to travel to other development centers for product training and cross-site collaboration.
•One time home office stipend.
•Generous paid parental leave (including adoptive leave), marriage leave, bereavement leave, carer's leave and paid sick days.
•Meal allowance.
•Reimbursement for training towards continuing education.
