Data Security Engineer

Who we are: Want to make an impact? Join our pack and come work (and play!) with us.
We believe everyone deserves the unconditional love of a pet—and at Rover, our mission is to make it easier to experience that love. Founded in 2011, the Rover app and website connect dog and cat parents with loving pet sitters and dog walkers in neighborhoods across the US, Canada, and Europe. We empower our community of trusted pet sitters and dog walkers to run their own pet care businesses on Rover with the tools and security of a global company to back them.
Headquartered in Seattle, Washington, we work closely with our teams in Barcelona, San Antonio, Spokane, and remote locations. We’ve got a reputation for being a great place to work, having been named among the 100 Best Companies to Work For in Seattle Business Magazine and Washington’s Best Workplaces in the Puget Sound Business Journal. We're an agile, fast-growing company, and our leadership comes from some of the world's most respected tech companies. 
At Rover, our furry coworkers are just as important as our human ones—and we wouldn’t have it any other way. Along with making the joys of pet parenthood more accessible, we’re committed to fostering a diverse, inclusive, and welcoming community of pet people—and that starts with our employees.
This role is hybrid -in our Barcelona office one day per week in office (Thursday). Applicants must reside in or relocate to Barcelona and be authorized to work in Spain.
Who we're looking for:
We're looking for a Data Security Engineer to join our Cyber Security team. You'll primarily be responsible for implementing and managing the data security program, monitoring data workflows, and implementing solutions to meet compliance regulations. Ideally, you'll also have experience with privacy management platforms, privacy regulations, and data protection processes.You'll succeed in this role if you have a keen eye for detail, strong organizational skills, and a passion for data security and privacy, enabling you to navigate complex data workflows and support cross-functional teams in maintaining robust data privacy practices.

Your Responsibilities:

• Serve as the subject matter expert for the Data Security Engineering program at Rover and Rover companies
• Provide expertise and guidance to internal stakeholders on privacy best practices
• Primary administrator of the Ketch platform and ensure configuration to best practices
• Monitor and fix vulnerabilities in our underlying Data infrastructure 
• Work with our data platform team to engineer best practices when it comes to encryption, sanitization, and monitoring
• Collaborate with external vendors and consultants as needed to support privacy due diligence and assessments of third parties
• Support efforts to maintain documentation related to data protection, including records of data processing activities, data breach notifications, and training records
• Partner with Legal and compliance to ensure we are meeting business goals
• Support incident response activities, including documentation, investigation, and remediation
• Implement encryption strategies for data at rest and in transit using AWS services such as KMS, S3, RDS, and others
• Develop and deploy secure AWS architectures that ensure data privacy and compliance with relevant regulations (e.g., GDPR, CCPA)
• Automate data subject requests, including access, rectification, erasure, restriction, portability, and objections to processing
• Develop data loss protection technical controls across our application, corporate environment and code base

Your Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, or a related field.
• Experience with data mapping, automating data deletion workflows, and managing privacy management software (Ketch or equivalent)
• 3+ years of experience in data privacy, security engineering, or a related role with a focus on AWS environments.
• Proven experience with AWS security services, tools, and best practices.
• Strong understanding of data privacy regulations and compliance requirements.

Your Bonus skills:

• Privacy certifications such as CIPP (preferably CIPP-US and/or CIPP-E), CIPM, or CIPT.
• Security Certifications such as CISSP, CISM, OSCP
• Experience using Ketch
• Familiarity with privacy incident response processes.
• Knowledge of data governance and information security.

Benefits:

• Competitive compensation
• Long-term incentive plan with a company performance-based cash payout
• Permanent contract
• Pension Plan
• Meal tickets through Cobee
• Generous PTO Allowance
• Hybrid schedule
• Private health insurance
• Discounted Gym Membership
• Bring your dog to work (and unlimited puppy time)
• Monetary help for adopting a dog plus yearly credit to use on our platform 
• Flexible work hours, sometimes you’ll need to be in at certain times, but on the whole, we’re pretty flexible when it comes to managing workload and time
• Grab snacks, fresh fruit, in our kitchen to keep yourself going 
• Regular team activities, including happy hours, game nights, and more

Rover is an equal-opportunity employer committed to promoting a diverse, inclusive, and inventive environment with the best employees. We’re driven by seeing our people succeed and grow, and we work to ensure everyone contributes to their fullest potential. We consider all qualified applicants without regard to age, race, color, ancestry, national origin, religion, disability, protected veteran status, sex, gender identity or expression, sexual orientation, or any other protected status in accordance with applicable laws, regulations, and ordinances.