Role: Senior Data Security Engineer
Function: Data Security / Engineering
Location: Bengaluru
Type: Full-time
Industry: Information Technology & Services, Computer Software, Fintech, Regtech
About Company
A Bengaluru-based enterprise tech startup founded in 2016. The company provides regulatory-compliant digital infrastructure for India's financial and identity ecosystem.
Its offerings include Aadhaar-enabled e-signing, e-KYC, eNACH, document automation, and consent/data privacy management. It serves 1,500+ enterprises and 100 million individual users across SEBI, RBI, and DPDP-regulated workflows.
Backed by investors including Groww and Rainmatter, the company operates at the intersection of rapid product innovation and stringent regulatory compliance.
Position Overview
This role is the technical owner of the company's DSPM product — a P0 initiative on a regulatory clock tied to India's DPDP framework. The engineer will lead architecture and delivery across data discovery, classification, access visibility, and attestation reporting, while mentoring a young pod and co-owning product scoping until a dedicated PM joins. This is a domain-defining seat: the person who sets the standard for how the company understands, governs, and protects its data assets.
Role & Responsibilities
- Own DSPM architecture end-to-end — design and evolve discovery pipelines, classification engine, access-visibility model, and DPDP attestation reporting.
- Drive AD/IAM integration and lead code-based data-flow mapping across Java, Python, and Node.js stacks.
- Mentor junior engineers (several under one year in role) through pairing, structured code review, and engineering discipline.
- Co-own attestation scoping and delivery sequencing with the pod anchor and DR in the absence of a dedicated DSPM PM.
- Partner with the Platform pod's access-governance program to unify the who CAN touch data (DSPM access-visibility) and who DOES touch data (production-access removal) narratives.
- Shape the research roadmap: eBPF-based telemetry, AI/ML data governance module, and DSAR automation.
- Translate regulatory timelines (DPDP) into scoped, deliverable engineering milestones without PM scaffolding.
Must Have Criteria
- 6+ years in data security engineering with demonstrated depth in DSPM, DLP, cloud security posture, or data-governance platforms.
- Hands-on experience building or operating data discovery and classification systems at enterprise scale across cloud-native data stores (e.g., S3, RDS, BigQuery) and/or on-prem databases.
- 3+ years of hands-on cloud platform depth — AWS, GCP, or Azure — including security-relevant services (IAM policies, storage ACLs, audit logging, KMS).
- IAM/Active Directory integration experience — entitlement mapping, access-visibility pipelines, and privilege scoping.
- Ability to read and map data flows across Java, Python, and Node.js codebases for security classification purposes.
- Proven ability to scope and deliver an MVP against a hard regulatory deadline independently — without a PM driving the pen.
- Experience operating as the most senior domain expert on a team, including setting technical direction and mentoring junior engineers.
Nice to Have
- Hands-on experience with eBPF for runtime telemetry or network observability in a security context.
- Exposure to DSAR automation or privacy-engineering workflows under GDPR, DPDP, or equivalent frameworks.
- Familiarity with AI/ML governance — model data lineage, training-data classification, or inference-time data controls.
- Prior experience in a fintech, regtech, or identity-infrastructure company operating under RBI/SEBI/DPDP mandates.
- Experience working in a pod or startup environment where product and engineering ownership overlap.
What We Offer
- Technical ownership of a P0 product with direct regulatory and business impact — not a feature team, a domain.
- Opportunity to define DSPM architecture from the ground up within a fast-moving company where decisions land quickly.
- Exposure to India's evolving data-privacy regulatory landscape (DPDP) at the implementation frontier.
- Collaborative culture with high engineering standards, first-principles thinking, and minimal bureaucracy.
