GDPR/CCPA（欧洲）软件工程师
Software Engineer - GDPR/CCPA (Europe)
Our client is a fast-growing B2B SaaS company hiring a backend engineer to own its data deletion and suppression pipeline — the system that handles privacy requests end to end, from any channel, at scale.
Your first major milestone: building and shipping a new system to handle DROP (California privacy deletion requests). Beyond that, you'll own compliance tooling for GDPR, CCPA, and whatever regulations come next.
This is not a role where "move fast and break things" applies. A mistake in a regular feature means a bug in production; a mistake here can mean a lawsuit. We're looking for someone who takes correctness seriously and treats this responsibility with the weight it deserves.
What You'll Do
- Own the privacy request pipeline end to end: data deletion, suppression, and audit across all channels
- Design compliance workflows that scale with evolving regulations (GDPR, CCPA, and future frameworks)
- Work with large, business-critical databases containing high volumes of records
- Write thoroughly tested, verifiable code — testing discipline is a core part of this job, not an afterthought
What We're Looking For
Must have:
- 5 years of backend engineering experience with Node.js and Python
- At least 2 years of experience working with Data Privacy work (GDPR, CCPA)
- Hands-on experience with NoSQL databases (e.g., MongoDB, Elasticsearch)
- Comfort working with data at scale — large databases with high record counts
- A correctness-first mindset: careful, rigorous, and serious about getting things right the first time
- Strong testing habits — you verify your work before it ships
Nice to have:
- Elasticsearch experience specifically (deep indexing expertise not required — you can learn the specifics on the job if you know NoSQL fundamentals)
- Some data engineering exposure
- Prior experience with privacy/compliance systems (GDPR, CCPA, data subject requests)
Not required:
· Frontend or accessibility work — this role is purely about the data side of privacy compliance (deletion pipelines, suppression, cookies/consent data), not UI
Why This Role Matters
Privacy regulation is only expanding, and this system sits directly in the path of legal risk. It's a role with clear ownership, real stakes, and visible impact — and a well-scoped technical domain where doing careful, high-quality work is genuinely valued over raw speed.
We offer
- Remote within Europe.
- Small, autonomous team — no micromanagement.
- Competitive B2B compensation.
Originally posted on Himalayas