[Hiring] Senior Security Engineer - Data Security @Deciphex

Role Description

You will be the engineer who protects sensitive data at Deciphex. We work in clinical and research digital pathology, so the data includes patient health information, personal data, and confidential business and customer data.

You will report to the Principal Engineer - Cybersecurity & DevOps and join a lean, hands-on team where each engineer owns a defined area, with no large support structure.

In your first 12 months, three priorities come first:

• Data loss prevention and information protection on Google Workspace and Microsoft 365: classification, labeling, and sharing controls, so sensitive data is shared only as intended.
• Least-privilege access to sensitive data: regular access reviews, and controlled, logged sharing with external providers and customers.
• Security review of the tools, integrations, and data flows that touch sensitive data, including flows to on-premises laboratory systems, integrations and workflows, and the data side of our AWS-hosted products.

Our technology environment:

• We are a Google Workspace company that also uses Microsoft services, and our products run on AWS.
• You will work with the native data-protection and audit features of each platform: Google Workspace DLP, labels and context-aware access, Microsoft Purview and SharePoint, and AWS storage, encryption, and logging services, alongside the security hubs of each platform.
• We also use dedicated enterprise tools for endpoint protection and email security, and Vanta for compliance automation.

Qualifications

• 5/6+ years of hands-on security engineering, including ownership of security controls in production.
• Hands-on DLP or information-protection experience in Google Workspace: sharing and external-access controls, labels and rules, and context-aware access.
• Working knowledge of Microsoft 365 data security: Purview, SharePoint sharing and permissions, and how Entra ID access applies to data.
• Strong access-control fundamentals across SaaS and cloud (Google Workspace, Entra ID, AWS), including how data is stored and encrypted.
• Python scripting and API automation, and practical experience using generative AI tooling to work faster and more reliably.
• Able to investigate data access and movement using audit logs, a SIEM, a security hub, or native platform tools.
• Able to work with product, engineering, research, clinical, privacy, and information-security colleagues, and explain both the risk and the practical control.
• Experience with health or other regulated data helps.

Requirements

• Build and run the technical controls that keep data confidential wherever it lives: Google Workspace and Microsoft 365, AWS-hosted products, other cloud and SaaS tools, or on-premises.
• Design, deploy, and tune data loss prevention and information-protection controls. Set retention, versioning, and recovery settings so critical data survives ransomware and accidental deletion.
• Enforce least privilege, run access reviews, fix oversharing, and control and log what leaves the company.
• Keep sensitive data located through discovery and flow mapping. Set encryption and key-management requirements for cloud data stores and verify them.
• Carry out the technical security review of new tools, integrations, and AI services before they touch sensitive data.
• Support the application security team on app data security, and collaborate with the product and data teams to lead good practice such as access models and logging.
• Monitor data access and movement in audit logs and security hubs.
• Lead the technical side of data incidents: scope, contain, preserve evidence and brief the Information Security team and DPO.
• Support data subject and customer data requests.
• Support the Information Security team with the technical side of ISO 27001, NHS DSPT, GDPR, and customer assurance, providing data security expertise and automated evidence.
• Automate administration, investigation, and reporting with Python, APIs, and generative AI tooling.

Benefits

• 💰 Salary with performance-based annual increases to recognise your contribution.
• 🩺 Healthcare benefits to support your wellbeing.
• 🌴 Annual leave plus additional Christmas leave to rest and recharge.
• 🔬 Meaningful work that helps improve patient outcomes.
• 🚀 A growing company where you can make your mark.
• 💡 Varied, challenging projects to keep you learning.
• 📈 Regular feedback and career opportunities to help you progress.
• 🤝 A supportive, multicultural team to share ideas and learn from.