Data Security Engineer

Data Security Engineer

Liebherr

Madrid, Spain

The Data Security Engineer is responsible for implementing and maintaining security controls that protect data at rest, in transit, and in use. They focus on encryption, data loss prevention (DLP), access controls, monitoring to prevent unauthorized access and ensuring compliance with data regulations.

We’re looking for a Data Security Engineer to join our growing global team in Madrid and help implement, secure, and evolve the digital backbone of our enterprise. This is your chance to make an impact on projects that touch every corner of our organization—while working in a modern environment that values both collaboration and flexibility.

Creating passion: your responsibilities

• Implement and manage encryption solutions (AES, RSA, TLS, HSMs, PKI)
• Ensure secure key management practices using KMIP, AWS KMS, Azure Key Vault, securing data across Multi-Cloud and on-premise environments
• Implement data encryption techniques (e.g. masking, anonymization) across databases, cloud storage, and applications
• Deploy and manage Data Loss Prevention (DLP) solutions (e.g. Microsoft Purview, Symantec, Forcepoint) to monitor and prevent data exfiltration
• Conduct data classification and risk assessments, collaborate with compliance teams to for data security policies and procedures
• Ensure compliance with standards and frameworks such as GDPR, ISO 27001, NIST
• Collaborate with SOC/SIRT and Support on data security incidents participating in Incident Response

Contributing your strengths: your qualifications

• Bachelor’s/Master’s in Cybersecurity, Computer Science, or related field
• 3+ years in cybersecurity, ideally as Data Security Engineer
• Following certificates are preferred; CISSP, CIPP, Cloud certifications (AWS, Azure, or GCP)
• English is a Must, German and French are a plus
• Understanding of cybersecurity frameworks and standards (e.g. ISO27001, NIST, GDPR)
• Strong knowledge of data encryption standards (AES, RSA, ECC, TLS, IPsec)
• Strong experience with data encryption tools (Thales CipherTrust, AWS KMS, Azure Key Vault)
• Hands-on knowledge of DLP, SIEM, and security analytics tools